PC lent

Question

FORUM high-tech

SECURITE

Sécurité

PC lent

Recherche :

141 utilisateurs inconnus

Mot : Pseudo : Filtrer
Page : 1 Bas de page
Auteur	Sujet : PC lent

Info45

Présent de temps en temps (De 50 à 99 messages postés)

Bonjour,
Est-ce que quelqu'un pourrait m'aider à nettoyer mon PC
Ma Config : XP édition familiale V5.1 SP3 à jour
Avira Free Antivirus V12.0.0.190 à jour
Zone Alarm Free Firewall V9.2.105
Mozilla FireFox
Mon Pb : PC lent mais particulièrement lent lorsque j'ouvre Firefox alors que pas de ralentissement suplémentaire avec InternetExplorer.
J'ai scanné mon système avec Avira après 5h d'analyse 30% de mon système 3 trojans détectés et mis en quarantaine.
J'ai relancé Avira de nuit le lendemain matin PC planté donc aucun rapport d’analyse
Je viens de relancer le scan 6h d’analyse 40%
Autre Pb dernièrement rencontré lors de la mise à jour de ZoneAlarm ce dernier est resté bloqué à la phase d’initialisation suite à cela j’ai dû réinstaller la version antérieure c’est à dire V9.2.105
Merci par avance de votre aide

(Publicité)

Page :

1

Haut de page

Sujets relatifs
pc lent	Ordinateur lent UC=100%
Résolu: Ordinateur lent et mots soulignées en vert	PC tres lent au demarrage (sur le bureau) =>RESOLU
mon ordinateur est trop lent
Plus de sujets relatifs à : PC lent

Les 5 sujets de discussion précédents	Nombre de réponses	Dernier message
Virus Ukash	13	22/02/2012 à 16:25:02
problèmes pub	2	06/02/2012 à 18:58:40
backdoor.win32.sinowal.knf	15	17/02/2012 à 19:05:35
Logiciel malveillant TR/Agent.avx	7	10/02/2012 à 22:08:46
wshelper.dll ne peut être chargée.	21	11/02/2012 à 00:31:25

kmisol · Answer 1 · Posté le 06/02/2012 à 19:22:20

Hello, Télécharge RSIT (de random/random) sur le bureau : - Sur le bureau, double clique sur RSIT.exe ; - Clique sur Continue (Disclaimer) dans la fenêtre ; Si la dernière version de HijackThis n'est pas détectée sur ton PC, RSIT le téléchargera et te demandera d'accepter la licence. Une fois l’analyse achevée, 2 fichiers texte s’ouvriront (avec le bloc-notes). Poste le contenu de log.txt (celui qui apparaît à l’ écran) ainsi que info.txt (que tu trouveras dans le dossier "rsit" qui est à la base du disque dur). Tutoriel -> ici

Info45 · Answer 2 · Posté le 06/02/2012 à 22:54:10

Info45

kmisol a écrit :

Hello,

Télécharge RSIT (de random/random) sur le bureau :

- Sur le bureau, double clique sur RSIT.exe ;
- Clique sur Continue (Disclaimer) dans la fenêtre ;

Si la dernière version de HijackThis n'est pas détectée sur ton PC, RSIT le téléchargera et te demandera d'accepter la licence.

Une fois l’analyse achevée, 2 fichiers texte s’ouvriront (avec le bloc-notes).

Poste le contenu de log.txt (celui qui apparaît à l’ écran) ainsi que info.txt (que tu trouveras dans le dossier "rsit" qui est à la base du disque dur).

Tutoriel -> ici

Merci pour votre réponse je vais faire cette manip
Entre temps mon scan s'est terminé sans avoir détecté d'autre pb après 8h20 d'analyse pour un disque dur de 100Go !
Autre chose un process updater me parait suspect je l'ai tué mon pc a gagné en vitesse je crains qu'il ne redémarre à la prochaine ouverture de windows, je vais lancer Malwarebytes cette nuit des fois que !
Bonne nuit à demain.

kmisol · Answer 3 · Posté le 06/02/2012 à 23:03:03

kmisol

Imagine ...
Profil : Equipe sécurité

Célèbre sur tout le forum (de 30 000 à 99 999 messages postés)

...

Comme tu veux ; mais, il aurait été bon de poster les rapports demandés !

Info45 · Answer 4 · Posté le 06/02/2012 à 23:24:10

Voici les rapports ----------------------- Log.txt------------------------------ Logfile of random's system information tool 1.09 (written by random/random) Run by Shot at 2012-02-06 23:14:11 Microsoft Windows XP Édition familiale Service Pack 3 System drive C: has 4 GB (15%) free of 30 GB Total RAM: 1014 MB (39% free) Logfile of Trend Micro HijackThis v2.0.4 Scan saved at 23:14:59, on 06/02/2012 Platform: Windows XP SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v8.00 (8.00.6001.18702) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\csrss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\ZoneLabs\vsmon.exe C:\WINDOWS\system32\spoolsv.exe c:\program files\fichiers communs\logitech\lvmvfm\LVPrcSrv.exe C:\Program Files\Avira\AntiVir Desktop\sched.exe C:\Program Files\Fichiers communs\EPSON\EBAPI\eEBSVC.exe C:\Program Files\Avira\AntiVir Desktop\avguard.exe C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe c:\APPS\Powercinema\Kernel\TV\CLCapSvc.exe C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLServer.exe C:\Program Files\Fichiers communs\EPSON\EBAPI\SAgent2.exe c:\APPS\HIDSERVICE\HIDSERVICE.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\Java\jre6\bin\jqs.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\System32\svchost.exe C:\Program Files\PixVue.Com\PixVue\bin\Daemon.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Retrospect\Retrospect Express HD 2.5\retrorun.exe C:\WINDOWS\system32\svchost.exe c:\APPS\Powercinema\Kernel\TV\CLSched.exe C:\Program Files\Synaptics\SynTP\SynTPEnh.exe C:\WINDOWS\AGRSMMSG.exe C:\Program Files\Ask.com\Updater\Updater.exe C:\WINDOWS\system32\igfxtray.exe C:\WINDOWS\system32\hkcmd.exe C:\WINDOWS\system32\igfxpers.exe C:\Program Files\Avira\AntiVir Desktop\avgnt.exe C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\SuperCopier2\SuperCopier2.exe C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe C:\Program Files\Avira\AntiVir Desktop\avshadow.exe C:\Program Files\Avira\AntiVir Desktop\AVWEBGRD.EXE C:\Program Files\Orbitdownloader\orbitdm.exe C:\WINDOWS\system32\taskmgr.exe C:\WINDOWS\System32\alg.exe C:\WINDOWS\system32\wbem\wmiapsrv.exe C:\WINDOWS\system32\wbem\wmiprvse.exe C:\WINDOWS\system32\wuauclt.exe C:\Program Files\Microsoft Office\OFFICE11\WINWORD.EXE C:\Documents and Settings\Shot\Bureau\RSIT.exe C:\WINDOWS\system32\wbem\wmiprvse.exe C:\Program Files\trend micro\Shot.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://search.conduit.com?SearchSource=10&ctid=CT2613520 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://go.microsoft.com/fwlink/?LinkId=74005 R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens R3 - URLSearchHook: UrlSearchHook Class - {00000000-6E41-4FD3-8538-502F5495E5FC} - C:\Program Files\Ask.com\GenericAskToolbar.dll R3 - URLSearchHook: Protection ZoneAlarm Toolbar - {d7f26d0e-9801-45c3-a091-8a65e4ed73b5} - C:\Program Files\Protection_ZoneAlarm\prxtbProt.dll O2 - BHO: btorbit.com - {000123B4-9B42-4900-B3F7-F4B073EFC214} - C:\Program Files\Orbitdownloader\orbitcth.dll O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll O2 - BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file) O2 - BHO: EoRezoBHO - {64F56FC1-1272-44CD-BA6E-39723696E350} - (no file) O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: Ask Toolbar BHO - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll O2 - BHO: Protection ZoneAlarm - {d7f26d0e-9801-45c3-a091-8a65e4ed73b5} - C:\Program Files\Protection_ZoneAlarm\prxtbProt.dll O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll O2 - BHO: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll O3 - Toolbar: Copernic Agent - {F2E259E8-0FC8-438C-A6E0-342DD80FA53E} - C:\PROGRA~1\COPERN~1\COPERN~1.DLL O3 - Toolbar: &PixVue - {B28B4479-D9C2-41D1-B74D-74A1827037CD} - C:\Program Files\PixVue.Com\PixVue\bin\PixVue.dll O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll O3 - Toolbar: PrivBar - {300BC64A-BF32-4cc8-8917-91148CEFE700} - c:\progra~1\DropMyRights\PrivBar.dll O3 - Toolbar: Grab Pro - {C55BBCD6-41AD-48AD-9953-3609C48EACC7} - C:\Program Files\Orbitdownloader\GrabPro.dll O3 - Toolbar: Protection ZoneAlarm Toolbar - {d7f26d0e-9801-45c3-a091-8a65e4ed73b5} - C:\Program Files\Protection_ZoneAlarm\prxtbProt.dll O3 - Toolbar: Ask Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll O4 - HKLM\..\Run: "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32 O4 - HKLM\..\Run: C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC O4 - HKLM\..\Run: C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName O4 - HKLM\..\Run: HDAShCut.exe O4 - HKLM\..\Run: C:\Program Files\Synaptics\SynTP\SynTPEnh.exe O4 - HKLM\..\Run: AGRSMMSG.exe O4 - HKLM\..\Run: C:\WINDOWS\system32\NeroCheck.exe O4 - HKLM\..\Run: "C:\Program Files\Ask.com\Updater\Updater.exe" O4 - HKLM\..\Run: C:\WINDOWS\system32\igfxtray.exe O4 - HKLM\..\Run: C:\WINDOWS\system32\hkcmd.exe O4 - HKLM\..\Run: C:\WINDOWS\system32\igfxpers.exe O4 - HKLM\..\Run: "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min O4 - HKLM\..\Run: "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe" O4 - HKCU\..\Run: C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: C:\Program Files\SuperCopier2\SuperCopier2.exe O4 - HKCU\..\Run: C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe O4 - HKUS\S-1-5-19\..\Run: C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL') O4 - HKUS\S-1-5-20\..\Run: C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU') O4 - HKUS\S-1-5-18\..\Run: C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: C:\WINDOWS\system32\CTFMON.EXE (User 'Default user') O4 - Global Startup: MonacoGamma.lnk = C:\Program Files\Monaco Systems\MonacoOPTIX 2.0\MonacoGamma.exe O8 - Extra context menu item: &Download by Orbit - res://C:\Program Files\Orbitdownloader\orbitmxt.dll/201 O8 - Extra context menu item: &Grab video by Orbit - res://C:\Program Files\Orbitdownloader\orbitmxt.dll/204 O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\WINDOWS\system32\GPhotos.scr/200 O8 - Extra context menu item: Do&wnload selected by Orbit - res://C:\Program Files\Orbitdownloader\orbitmxt.dll/203 O8 - Extra context menu item: Down&load all by Orbit - res://C:\Program Files\Orbitdownloader\orbitmxt.dll/202 O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000 O9 - Extra button: Run WinHTTrack - {36ECAF82-3300-8F84-092E-AFF36D6C7040} - C:\Program Files\WinHTTrack\WinHTTrackIEBar.dll O9 - Extra 'Tools' menuitem: Launch WinHTTrack - {36ECAF82-3300-8F84-092E-AFF36D6C7040} - C:\Program Files\WinHTTrack\WinHTTrackIEBar.dll O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL O9 - Extra button: Afficher ou masquer l'HP Smart Web Printing - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O14 - IERESET.INF: START_PAGE_URL=file://C:\APPS\IE\offline\fr.htm O16 - DPF: {2C7B74DE-3A9E-4CD3-A8DB-47411E9680A8} (VirginMega.DML.Interface) - http://alice.vm-wl.com/Telechargement/DownManLight.cab O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll O16 - DPF: {56762DEC-6B0D-4AB4-A8AD-989993B5D08B} (OnlineScanner Control) - http://www.eset.eu/buxus/docs/OnlineScanner.cab O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab O16 - DPF: {DEB21AD3-FDA4-42F6-B57D-EE696A675EE8} (IPSUploader Control) - http://as.photoprintit.de/ips-opdata/layout/default01/activex/IPSUploader.cab O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} (get_atlcom Class) - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab O18 - Protocol: bw+0 - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw+0s - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw-0 - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw-0s - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw00 - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw00s - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw10 - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw10s - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw20 - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw20s - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw30 - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw30s - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw40 - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw40s - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw50 - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw50s - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw60 - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw60s - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw70 - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw70s - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw80 - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw80s - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw90 - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw90s - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwa0 - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwa0s - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwb0 - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwb0s - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwc0 - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwc0s - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwd0 - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwd0s - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwe0 - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwe0s - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwf0 - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwf0s - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll O18 - Protocol: bwg0 - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwg0s - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwh0 - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwh0s - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwi0 - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwi0s - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwj0 - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwj0s - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwk0 - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwk0s - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwl0 - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwl0s - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwm0 - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwm0s - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwn0 - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwn0s - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwo0 - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwo0s - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwp0 - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwp0s - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwq0 - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwq0s - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwr0 - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwr0s - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bws0 - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bws0s - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwt0 - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwt0s - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwu0 - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwu0s - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwv0 - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwv0s - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bww0 - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bww0s - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwx0 - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwx0s - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwy0 - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwy0s - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwz0 - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwz0s - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: offline-8876480 - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O22 - SharedTaskScheduler: Pré-chargeur Browseui - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll O22 - SharedTaskScheduler: Démon de cache des catégories de composant - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll O23 - Service: Avira Planificateur (AntiVirSchedulerService) - Avira Operations GmbH & Co. KG - C:\Program Files\Avira\AntiVir Desktop\sched.exe O23 - Service: Avira Protection temps réel (AntiVirService) - Avira Operations GmbH & Co. KG - C:\Program Files\Avira\AntiVir Desktop\avguard.exe O23 - Service: Avira Protection Web (AntiVirWebService) - Avira Operations GmbH & Co. KG - C:\Program Files\Avira\AntiVir Desktop\AVWEBGRD.EXE O23 - Service: AOL Connectivity Service (AOL ACS) - America Online, Inc. - C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - c:\APPS\Powercinema\Kernel\TV\CLCapSvc.exe O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - c:\APPS\Powercinema\Kernel\TV\CLSched.exe O23 - Service: CyberLink Media Library Service - Cyberlink - C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLServer.exe O23 - Service: Service d'administration du Gestionnaire de disque logique (dmadmin) - Unknown owner - C:\WINDOWS\System32\dmadmin.exe O23 - Service: EpsonBidirectionalService - Unknown owner - C:\Program Files\Fichiers communs\EPSON\EBAPI\eEBSVC.exe O23 - Service: EPSON Printer Status Agent2 (EPSONStatusAgent2) - SEIKO EPSON CORPORATION - C:\Program Files\Fichiers communs\EPSON\EBAPI\SAgent2.exe O23 - Service: Journal des événements (Eventlog) - Unknown owner - C:\WINDOWS\system32\services.exe O23 - Service: Generic Service for HID Keyboard Input Collections (GenericHidService) - Unknown owner - c:\APPS\HIDSERVICE\HIDSERVICE.exe O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1150\Intel 32\IDriverT.exe O23 - Service: Service COM de gravage de CD IMAPI (ImapiService) - Unknown owner - C:\WINDOWS\system32\imapi.exe O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe O23 - Service: Process Monitor (LVPrcSrv) - Logitech Inc. - c:\program files\fichiers communs\logitech\lvmvfm\LVPrcSrv.exe O23 - Service: LVSrvLauncher - Logitech Inc. - C:\Program Files\Fichiers communs\Logitech\SrvLnch\SrvLnch.exe O23 - Service: Partage de Bureau à distance NetMeeting (mnmsrvc) - Unknown owner - C:\WINDOWS\system32\mnmsrvc.exe O23 - Service: MySqlInventime - Unknown owner - c:\mysql\bin\mysqld-max-nt.exe O23 - Service: PixVue - PixVue.Com - C:\Program Files\PixVue.Com\PixVue\bin\Daemon.exe O23 - Service: Planificateur LiveUpdate automatique - Unknown owner - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe (file missing) O23 - Service: Plug-and-Play (PlugPlay) - Unknown owner - C:\WINDOWS\system32\services.exe O23 - Service: Gestionnaire de session d'aide sur le Bureau à distance (RDSessMgr) - Unknown owner - C:\WINDOWS\system32\sessmgr.exe O23 - Service: Retrospect Express HD Launcher (RetroExpLauncher) - EMC Corporation - C:\Program Files\Retrospect\Retrospect Express HD 2.5\retrorun.exe O23 - Service: Carte à puce (SCardSvr) - Unknown owner - C:\WINDOWS\System32\SCardSvr.exe O23 - Service: SwitchBoard - Adobe Systems Incorporated - C:\Program Files\Fichiers communs\Adobe\SwitchBoard\SwitchBoard.exe O23 - Service: Journaux et alertes de performance (SysmonLog) - Unknown owner - C:\WINDOWS\system32\smlogsvc.exe O23 - Service: UPnPService - Magix AG - C:\Program Files\Fichiers communs\MAGIX Shared\UPnPService\UPnPService.exe O23 - Service: TrueVector Internet Monitor (vsmon) - Check Point Software Technologies LTD - C:\WINDOWS\system32\ZoneLabs\vsmon.exe O23 - Service: Cliché instantané de volume (VSS) - Unknown owner - C:\WINDOWS\System32\vssvc.exe O23 - Service: Carte de performance WMI (WmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\wmiapsrv.exe O23 - Service: Service Partage réseau du Lecteur Windows Media (WMPNetworkSvc) - Unknown owner - C:\Program Files\Windows Media Player\WMPNetwk.exe -- End of file - 27197 bytes ======Scheduled tasks folder====== C:\WINDOWS\tasks\AdobeAAMUpdater-1.0-SN012345678912-Utilisateur.job C:\WINDOWS\tasks\ParetoLogic Registration3.job C:\WINDOWS\tasks\Scheduled Update for Ask Toolbar.job =========Mozilla firefox========= ProfilePath - C:\Documents and Settings\Shot\Application Data\Mozilla\Firefox\Profiles\8lrhl7pf.default prefs.js - "browser.search.useDBForOrder" - true prefs.js - "browser.startup.homepage" - "file:///E:/Travail/Informatique/Develop/FrontPage/MonSiteWeb/index.htm|http://www.infos-du-net.com/forum/9869-10-ntfs-fat32|http://www.jurixt.com/xp/xp_15.htm|http://www.trucs-et-astuces-windows.com/technique_pc/choix_ntfs_fat.html" prefs.js - "extensions.enabledItems" - "{20a82645-c095-46ed-80e3-08825760534b}:1.2.1, {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}:6.0.20, jqs@sun.com:1.0, smartwebprinting@hp.com:4.51, {d7f26d0e-9801-45c3-a091-8a65e4ed73b5}:2.7.1.3, {35379F86-8CCB-4724-AE33-4278DE266C70}:1.0.5, {972ce4c6-7e08-4474-a285-3208198ce6fd}:3.6.17" prefs.js - "keyword.URL" - "chrome://browser-region/locale/region.properties" "{20a82645-c095-46ed-80e3-08825760534b}"=C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\ "jqs@sun.com"=C:\Program Files\Java\jre6\lib\deploy\jqs\ff "smartwebprinting@hp.com"=C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 "Description"=Adobe® Flash® Player 10.1 Plugin "Path"=C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll "Description"=Canon MycameraPlugin "Path"=C:\Program Files\Canon\MyCamera Download Plugin\NPCIG.dll "Description"=ZoneAlarm Toolbar Api "Path"=C:\Program Files\CheckPoint\ZAForceField\TrustChecker\bin\npFFApi.dll "Description"=Picasa3 plugin "Path"=C:\Program Files\Picasa3\npPicasa3.dll "Description"=WLPG Install MIME type "Path"=C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll "Description"=Windows Presentation Foundation plug-in for Mozilla browsers "Path"=C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll "Description"=Viewpoint Media Player for Mozilla "Path"=C:\Program Files\Viewpoint\Viewpoint Experience Technology\npViewpoint.dll "Description"=Handles PDFs in-place in Firefox "Path"=C:\Program Files\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll "Description"=Yahoo! activeX Plug-in Bridge "Path"=C:\Program Files\Yahoo!\Common\npyaxmpb.dll C:\Program Files\Mozilla Firefox\extensions\ {972ce4c6-7e08-4474-a285-3208198ce6fd} C:\Program Files\Mozilla Firefox\components\ binary.manifest browsercomps.dll nsIQTScriptablePlugin.xpt C:\Program Files\Mozilla Firefox\plugins\ np-mswmp.dll npdeployJava1.dll NPOFFICE.DLL nppdf32.dll nppdf32.FRA npqtplugin.dll npqtplugin2.dll npqtplugin3.dll npqtplugin4.dll npqtplugin5.dll npqtplugin6.dll npqtplugin7.dll np_gp.dll nsIQTScriptablePlugin.xpt QuickTimePlugin.class WMP Firefox Plugin License.rtf WMP Firefox Plugin RelNotes.txt C:\Program Files\Mozilla Firefox\searchplugins\ amazon-france.xml bing.xml cnrtl-tlfi-fr.xml eBay-france.xml google.xml wikipedia-fr.xml yahoo-france.xml C:\Documents and Settings\Shot\Application Data\Mozilla\Firefox\Profiles\8lrhl7pf.default\extensions\ toolbar@ask.com {20a82645-c095-46ed-80e3-08825760534b} {d7f26d0e-9801-45c3-a091-8a65e4ed73b5} C:\Documents and Settings\Shot\Application Data\Mozilla\Firefox\Profiles\8lrhl7pf.default\searchplugins\ askcom.xml conduit.xml ======Registry dump====== Octh Class - C:\Program Files\Orbitdownloader\orbitcth.dll Yahoo! Toolbar Helper - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll HP Print Enhancer - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll Adobe PDF Link Helper - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll Spybot-S&D IE Protection - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll Programme d'aide de l'Assistant de connexion Windows Live - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll Ask Toolbar - C:\Program Files\Ask.com\GenericAskToolbar.dll Protection ZoneAlarm Toolbar - C:\Program Files\Protection_ZoneAlarm\prxtbProt.dll Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll HP Smart BHO Class - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll {F2E259E8-0FC8-438C-A6E0-342DD80FA53E} - Copernic Agent - C:\PROGRA~1\COPERN~1\COPERN~1.DLL {B28B4479-D9C2-41D1-B74D-74A1827037CD} - &PixVue - C:\Program Files\PixVue.Com\PixVue\bin\PixVue.dll {EF99BD32-C1FB-11D2-892F-0090271D4F88} - Yahoo! Toolbar avec bloqueur de fenêtres pop-up - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll {300BC64A-BF32-4cc8-8917-91148CEFE700} - PrivBar - c:\progra~1\DropMyRights\PrivBar.dll {C55BBCD6-41AD-48AD-9953-3609C48EACC7} - Grab Pro - C:\Program Files\Orbitdownloader\GrabPro.dll {d7f26d0e-9801-45c3-a091-8a65e4ed73b5} - Protection ZoneAlarm Toolbar - C:\Program Files\Protection_ZoneAlarm\prxtbProt.dll {D4027C7F-154A-4066-A1AD-4243D8127440} - Ask Toolbar - C:\Program Files\Ask.com\GenericAskToolbar.dll "IMJPMIG8.1"=C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE "PHIME2002ASync"=C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE "PHIME2002A"=C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE "Raccourci vers la page des propriétés de High Definition Audio"=C:\WINDOWS\system32\HDAShCut.exe "SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe "AGRSMMSG"=C:\WINDOWS\AGRSMMSG.exe "NeroFilterCheck"=C:\WINDOWS\system32\NeroCheck.exe ""= "IgfxTray"=C:\WINDOWS\system32\igfxtray.exe "HotKeysCmds"=C:\WINDOWS\system32\hkcmd.exe "Persistence"=C:\WINDOWS\system32\igfxpers.exe "avgnt"=C:\Program Files\Avira\AntiVir Desktop\avgnt.exe "ZoneAlarm Client"=C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe "CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe "SuperCopier2.exe"=C:\Program Files\SuperCopier2\SuperCopier2.exe "SpybotSD TeaTimer"=C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe "AdobeBridge"= C:\Program Files\Fichiers communs\Adobe\ARM\1.0\AdobeARM.exe C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe C:\Program Files\Fichiers communs\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe C:\Program Files\Fichiers communs\Adobe\CS5.5ServiceManager\CS5.5ServiceManager.exe F:\OI\Tutorom\Asuite1512\asuite.exe C:\Program Files\DAEMON Tools Lite\DTLite.exe C:\Program Files\HP\HP Software Update\HPWuSchd2.exe C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe C:\Program Files\Fichiers communs\Logitech\LComMgr\Communications_Helper.exe C:\Program Files\Logitech\QuickCam10\QuickCam10.exe C:\Program Files\Fichiers communs\Logitech\LComMgr\LVComSX.exe c:\Apps\Powercinema\PCMService.exe C:\Program Files\QuickTime\qttask.exe C:\Program Files\Real\RealPlayer\RealPlay.exe C:\PROGRA~1\RETROS~1\RETROS~1.5\RetroExpress.exe C:\WINDOWS\RTHDCPL.EXE C:\Program Files\Fichiers communs\Java\Java Update\jusched.exe C:\Program Files\Fichiers communs\Adobe\SwitchBoard\SwitchBoard.exe C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage MonacoGamma.lnk - C:\Program Files\Monaco Systems\MonacoOPTIX 2.0\MonacoGamma.exe C:\WINDOWS\system32\igfxdev.dll C:\Program Files\PixVue.Com\PixVue\bin\WinLogon.DLL C:\WINDOWS\system32\WgaLogon.dll WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll "notification packages"=:\WINDOWS\syste "dontdisplaylastusername"=0 "legalnoticecaption"= "legalnoticetext"= "shutdownwithoutlogon"=1 "undockwithoutlogon"=1 "NoDriveTypeAutoRun"=145 "NoDriveAutoRun"=67108863 "NoDriveTypeAutoRun"=255 "HonorAutoRunSetting"=1 "%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000" "%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019" "C:\Program Files\MSN Messenger\livecall.exe"="C:\Program Files\MSN Messenger\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)" "C:\Program Files\Orbitdownloader\orbitdm.exe"="C:\Program Files\Orbitdownloader\orbitdm.exe:*:Enabled:Orbit" "C:\Program Files\Orbitdownloader\orbitnet.exe"="C:\Program Files\Orbitdownloader\orbitnet.exe:*:Enabled:Orbit" "C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe:*:Enabled:hpqtra08.exe" "C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe:*:Enabled:hpqste08.exe" "C:\Program Files\HP\Digital Imaging\bin\hposid01.exe"="C:\Program Files\HP\Digital Imaging\bin\hposid01.exe:*:Enabled:hposid01.exe" "C:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe:*:Enabled:hpqkygrp.exe" "C:\Program Files\HP\Digital Imaging\bin\hpfcCopy.exe"="C:\Program Files\HP\Digital Imaging\bin\hpfcCopy.exe:*:Enabled:hpfccopy.exe" "C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe"="C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe:*:Enabled:hpoews01.exe" "C:\Program Files\HP\Digital Imaging\bin\hpiscnapp.exe"="C:\Program Files\HP\Digital Imaging\bin\hpiscnapp.exe:*:Enabled:hpiscnapp.exe" "C:\Program Files\HP\Digital Imaging\bin\hpqgplgtupl.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqgplgtupl.exe:*:Enabled:hpqgplgtupl.exe" "C:\Program Files\HP\Digital Imaging\bin\hpqgpc01.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqgpc01.exe:*:Enabled:hpqgpc01.exe" "C:\Program Files\HP\Digital Imaging\bin\hpqusgm.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqusgm.exe:*:Enabled:hpqusgm.exe" "C:\Program Files\HP\Digital Imaging\bin\hpqusgh.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqusgh.exe:*:Enabled:hpqusgh.exe" "C:\Program Files\HP\HP Software Update\HPWUCli.exe"="C:\Program Files\HP\HP Software Update\HPWUCli.exe:*:Enabled:hpwucli.exe" "C:\Program Files\HP\Digital Imaging\smart web printing\SmartWebPrintExe.exe"="C:\Program Files\HP\Digital Imaging\smart web printing\SmartWebPrintExe.exe:*:Enabled:smartwebprintexe.exe" "C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger" "C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe"="C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe:*:Enabled:Windows Live FolderShare" "C:\WINDOWS\system32\ZoneLabs\vsmon.exe"="C:\WINDOWS\system32\ZoneLabs\vsmon.exe:*:Enabled:vsmon" "%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000" "%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019" "C:\Program Files\MSN Messenger\livecall.exe"="C:\Program Files\MSN Messenger\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)" "C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe:*:Enabled:hpqtra08.exe" "C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe:*:Enabled:hpqste08.exe" "C:\Program Files\HP\Digital Imaging\bin\hposid01.exe"="C:\Program Files\HP\Digital Imaging\bin\hposid01.exe:*:Enabled:hposid01.exe" "C:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe:*:Enabled:hpqkygrp.exe" "C:\Program Files\HP\Digital Imaging\bin\hpfcCopy.exe"="C:\Program Files\HP\Digital Imaging\bin\hpfcCopy.exe:*:Enabled:hpfccopy.exe" "C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe"="C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe:*:Enabled:hpoews01.exe" "C:\Program Files\HP\Digital Imaging\bin\hpiscnapp.exe"="C:\Program Files\HP\Digital Imaging\bin\hpiscnapp.exe:*:Enabled:hpiscnapp.exe" "C:\Program Files\HP\Digital Imaging\bin\hpqgplgtupl.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqgplgtupl.exe:*:Enabled:hpqgplgtupl.exe" "C:\Program Files\HP\Digital Imaging\bin\hpqgpc01.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqgpc01.exe:*:Enabled:hpqgpc01.exe" "C:\Program Files\HP\Digital Imaging\bin\hpqusgm.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqusgm.exe:*:Enabled:hpqusgm.exe" "C:\Program Files\HP\Digital Imaging\bin\hpqusgh.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqusgh.exe:*:Enabled:hpqusgh.exe" "C:\Program Files\HP\HP Software Update\HPWUCli.exe"="C:\Program Files\HP\HP Software Update\HPWUCli.exe:*:Enabled:hpwucli.exe" "C:\Program Files\HP\Digital Imaging\smart web printing\SmartWebPrintExe.exe"="C:\Program Files\HP\Digital Imaging\smart web printing\SmartWebPrintExe.exe:*:Enabled:smartwebprintexe.exe" "C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger" "C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe"="C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe:*:Enabled:Windows Live FolderShare" "midimapper"=midimap.dll "msacm.imaadpcm"=imaadp32.acm "msacm.msadpcm"=msadp32.acm "msacm.msg711"=msg711.acm "msacm.msgsm610"=msgsm32.acm "msacm.trspch"=tssoft32.acm "vidc.cvid"=iccvid.dll "VIDC.I420"=lvcodec2.dll "vidc.iv31"=ir32_32.dll "vidc.iv32"=ir32_32.dll "vidc.iv41"=ir41_32.ax "VIDC.IYUV"=iyuv_32.dll "vidc.mrle"=msrle32.dll "vidc.msvc"=msvidc32.dll "VIDC.UYVY"=msyuv.dll "VIDC.YUY2"=msyuv.dll "VIDC.YVU9"=tsbyuv.dll "VIDC.YVYU"=msyuv.dll "wavemapper"=msacm32.drv "msacm.msg723"=msg723.acm "vidc.M263"=msh263.drv "vidc.M261"=msh261.drv "msacm.msaudio1"=msaud32.acm "msacm.sl_anet"=sl_anet.acm "msacm.iac2"=C:\WINDOWS\system32\iac25_32.ax "vidc.iv50"=ir50_32.dll "msacm.l3acm"=C:\WINDOWS\system32\l3codeca.acm "wave"=wdmaud.drv "midi"=wdmaud.drv "mixer"=wdmaud.drv "aux"=wdmaud.drv "msacm.siren"=sirenacm.dll "MSVideo8"=VfWWDM32.dll "MSVideo"=vfwwdm32.dll "wave1"=wdmaud.drv "midi1"=wdmaud.drv "mixer1"=wdmaud.drv "aux1"=wdmaud.drv "vidc.ptev"=PteVideo.dll "VIDC.MPG4"=mpg4c32.dll "VIDC.MP42"=mpg4c32.dll ======File associations====== .js - edit - .js - open - ======List of files/folders created in the last 1 month====== 2012-02-06 23:14:12 ----D---- C:\Program Files\trend micro 2012-02-06 23:14:11 ----D---- C:\rsit 2012-02-04 19:23:50 ----A---- C:\WINDOWS\system32\vsregexp.dll 2012-02-04 19:23:47 ----A---- C:\WINDOWS\system32\zlcommdb.dll 2012-02-04 19:23:47 ----A---- C:\WINDOWS\system32\zlcomm.dll 2012-02-04 19:23:37 ----A---- C:\WINDOWS\system32\vswmi.dll 2012-02-04 19:23:35 ----A---- C:\WINDOWS\system32\zpeng25.dll 2012-02-04 19:23:35 ----A---- C:\WINDOWS\system32\vsxml.dll 2012-02-04 19:23:34 ----D---- C:\WINDOWS\system32\ZoneLabs 2012-02-04 19:23:34 ----A---- C:\WINDOWS\system32\vspubapi.dll 2012-02-04 19:23:34 ----A---- C:\WINDOWS\system32\vsmonapi.dll 2012-02-04 19:23:30 ----A---- C:\WINDOWS\system32\vsdatant.sys 2012-02-04 19:23:29 ----D---- C:\Program Files\Zone Labs 2012-02-04 19:22:37 ----A---- C:\WINDOWS\system32\vsdata.dll 2012-02-04 19:22:36 ----A---- C:\WINDOWS\system32\vsutil.dll 2012-02-04 19:22:36 ----A---- C:\WINDOWS\system32\vsinit.dll 2012-02-04 19:19:45 ----D---- C:\WINDOWS\Internet Logs 2012-02-04 18:54:58 ----D---- C:\Program Files\Conduit 2012-02-04 18:54:53 ----D---- C:\Program Files\Protection_ZoneAlarm 2012-02-04 18:54:02 ----AH---- C:\WINDOWS\system32\zllictbl.dat 2012-02-04 18:53:51 ----A---- C:\WINDOWS\system32\vsutil_loc040c.dll 2012-02-04 13:49:06 ----D---- C:\Documents and Settings\All Users\Application Data\CheckPoint 2012-01-22 22:21:25 ----D---- C:\Documents and Settings\All Users\Application Data\Retrospect 2012-01-22 18:25:45 ----D---- C:\Documents and Settings\Shot\Application Data\Avira 2012-01-22 18:07:42 ----A---- C:\WINDOWS\system32\drivers\avkmgr.sys 2012-01-22 18:07:42 ----A---- C:\WINDOWS\system32\drivers\avipbb.sys 2012-01-22 18:07:42 ----A---- C:\WINDOWS\system32\drivers\avgntflt.sys 2012-01-22 18:07:17 ----D---- C:\Program Files\Avira 2012-01-22 18:07:17 ----D---- C:\Documents and Settings\All Users\Application Data\Avira 2012-01-19 09:13:26 ----HDC---- C:\WINDOWS\$NtUninstallKB2585542$ 2012-01-16 11:17:59 ----HDC---- C:\WINDOWS\$NtUninstallKB2646524$ 2012-01-16 11:17:42 ----HDC---- C:\WINDOWS\$NtUninstallKB2631813$ 2012-01-16 11:12:39 ----HDC---- C:\WINDOWS\$NtUninstallKB2598479$ 2012-01-16 11:12:23 ----HDC---- C:\WINDOWS\$NtUninstallKB2603381$ 2012-01-16 11:12:04 ----HDC---- C:\WINDOWS\$NtUninstallKB2584146$ ======List of files/folders modified in the last 1 month====== 2012-02-06 23:14:28 ----D---- C:\WINDOWS\Prefetch 2012-02-06 23:14:18 ----D---- C:\WINDOWS\Temp 2012-02-06 23:14:12 ----RHD---- C:\Program Files 2012-02-06 23:10:15 ----D---- C:\Documents and Settings\Shot\Application Data\Orbit 2012-02-06 23:08:12 ----D---- C:\WINDOWS\system32\CatRoot2 2012-02-06 23:06:37 ----A---- C:\WINDOWS\SchedLgU.Txt 2012-02-06 14:39:30 ----SHD---- C:\System Volume Information 2012-02-06 14:37:44 ----D---- C:\WINDOWS\system32\NtmsData 2012-02-06 11:41:09 ----D---- C:\Program Files\CRESUS2 2012-02-06 11:41:09 ----A---- C:\WINDOWS\win.ini 2012-02-06 10:16:35 ----D---- C:\WINDOWS\Registration 2012-02-05 21:27:43 ----HD---- C:\WINDOWS 2012-02-05 15:53:24 ----SD---- C:\WINDOWS\Tasks 2012-02-05 11:40:50 ----D---- C:\downloads 2012-02-04 23:52:51 ----SHD---- C:\WINDOWS\Installer 2012-02-04 23:52:50 ----D---- C:\Program Files\Ask.com 2012-02-04 20:07:50 ----HD---- C:\Config.Msi 2012-02-04 19:24:00 ----AD---- C:\WINDOWS\system32 2012-02-04 18:54:04 ----D---- C:\Program Files\CheckPoint 2012-02-04 13:52:40 ----D---- C:\WINDOWS\WinSxS 2012-02-04 13:33:58 ----RASH---- C:\BOOT.INI 2012-02-04 13:33:58 ----A---- C:\WINDOWS\system.ini 2012-02-04 13:21:55 ----D---- C:\Program Files\Geneatique2012 2012-02-04 13:20:14 ----D---- C:\Documents and Settings\All Users\Application Data\RetroExp 2012-02-04 09:57:06 ----A---- C:\WINDOWS\NeroDigital.ini 2012-02-02 17:14:01 ----D---- C:\Program Files\Mozilla Firefox 2012-01-22 22:24:30 ----D---- C:\Program Files\Retrospect 2012-01-22 21:55:50 ----D---- C:\Documents and Settings\Shot\Application Data\HPAppData 2012-01-22 21:19:07 ----D---- C:\WINDOWS\REPAIR 2012-01-22 18:43:50 ----HD---- C:\WINDOWS\inf 2012-01-22 18:07:42 ----D---- C:\WINDOWS\system32\drivers 2012-01-19 09:31:53 ----D---- C:\Documents and Settings\All Users\Application Data\Adobe 2012-01-19 09:31:40 ----D---- C:\Program Files\Fichiers communs\Adobe 2012-01-19 09:14:19 ----RSHD---- C:\WINDOWS\system32\dllcache 2012-01-19 01:07:43 ----HD---- C:\WINDOWS\$hf_mig$ 2012-01-16 11:18:04 ----A---- C:\WINDOWS\imsins.BAK 2012-01-16 11:12:58 ----A---- C:\WINDOWS\system32\MRT.exe 2012-01-16 10:40:47 ----D---- C:\Program Files\Adobe 2012-01-16 10:37:22 ----D---- C:\Documents and Settings\Shot\Application Data\Adobe ======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R0 agp440;Filtre de bus AGP Intel; C:\WINDOWS\system32\DRIVERS\agp440.sys R0 agpCPQ;Filtre de bus AGP Compaq; C:\WINDOWS\system32\DRIVERS\agpCPQ.sys R0 alim1541;Filtre de bus AGP ALI; C:\WINDOWS\system32\DRIVERS\alim1541.sys R0 amdagp;Pilote de filtre du bus AMD AGP; C:\WINDOWS\system32\DRIVERS\amdagp.sys R0 cbidf;cbidf; C:\WINDOWS\system32\DRIVERS\cbidf2k.sys R0 PxHelp20;PxHelp20; C:\WINDOWS\System32\Drivers\PxHelp20.sys R0 sisagp;Filtre de bus AGP SIS; C:\WINDOWS\system32\DRIVERS\sisagp.sys R0 sptd;sptd; C:\WINDOWS\System32\Drivers\sptd.sys R0 viaagp;Filtre de bus AGP VIA; C:\WINDOWS\system32\DRIVERS\viaagp.sys R1 avipbb;avipbb; C:\WINDOWS\system32\DRIVERS\avipbb.sys R1 avkmgr;avkmgr; C:\WINDOWS\system32\DRIVERS\avkmgr.sys R1 intelppm;Pilote de processeur Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys R1 PQNTDrv;PQNTDrv; C:\WINDOWS\system32\drivers\PQNTDrv.sys R1 ssmdrv;ssmdrv; C:\WINDOWS\system32\DRIVERS\ssmdrv.sys R1 WS2IFSL;Environnement de prise en charge de Fournisseur de services non-IFS Windows Sockets 2.0; C:\WINDOWS\System32\drivers\ws2ifsl.sys R2 ASCTRM;ASCTRM; C:\WINDOWS\system32\drivers\ASCTRM.sys R2 avgntflt;avgntflt; C:\WINDOWS\system32\DRIVERS\avgntflt.sys R2 vsdatant;vsdatant; C:\WINDOWS\System32\vsdatant.sys R3 Afc;PPdus ASPI Shell; C:\WINDOWS\system32\drivers\Afc.sys R3 AgereSoftModem;Agere Systems Soft Modem; C:\WINDOWS\system32\DRIVERS\AGRSM.sys R3 HDAudBus;Pilote de bus Microsoft UAA pour High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys R3 HidUsb;Pilote de classe HID Microsoft; C:\WINDOWS\system32\DRIVERS\hidusb.sys R3 ialm;ialm; C:\WINDOWS\system32\DRIVERS\igxpmp32.sys R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys R3 LVPr2Mon;Logitech LVPr2Mon Driver; C:\WINDOWS\system32\DRIVERS\LVPr2Mon.sys R3 mouhid;Pilote HID de souris; C:\WINDOWS\system32\DRIVERS\mouhid.sys R3 RTL8023xp;Realtek 10/100/1000 NIC Family all in one NDIS XP Driver; C:\WINDOWS\system32\DRIVERS\Rtlnicxp.sys R3 SynTP;Synaptics TouchPad Driver; C:\WINDOWS\system32\DRIVERS\SynTP.sys R3 USBSTOR;Pilote de stockage de masse USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS R3 usbuhci;Pilote miniport de contrôleur hôte universel USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys R3 w29n51;Pilote de carte de connexion réseau Intel(R) PRO/Wireless 2200BG pour Windows XP; C:\WINDOWS\system32\DRIVERS\w29n51.sys R3 wanatw;WAN Miniport (ATW); C:\WINDOWS\system32\DRIVERS\wanatw4.sys S0 srescan;srescan; C:\WINDOWS\system32\ZoneLabs\srescan.sys S2 adfs;adfs; C:\WINDOWS\system32\drivers\adfs.sys S3 catchme;catchme; \??\C:\DOCUME~1\UTILIS~1\LOCALS~1\Temp\catchme.sys S3 HdAudAddService;Pilote de fonction Microsoft UAA pour Service High Definition Audio; C:\WINDOWS\system32\drivers\HdAudio.sys S3 HPZid412;IEEE-1284.4 Driver HPZid412; C:\WINDOWS\system32\DRIVERS\HPZid412.sys S3 HPZipr12;Print Class Driver for IEEE-1284.4 HPZipr12; C:\WINDOWS\system32\DRIVERS\HPZipr12.sys S3 HPZius12;USB to IEEE-1284.4 Translation Driver HPZius12; C:\WINDOWS\system32\DRIVERS\HPZius12.sys S3 LVcKap;Logitech AEC Driver; C:\WINDOWS\system32\DRIVERS\LVcKap.sys S3 LVMVDrv;Logitech Machine Vision Engine Loader; C:\WINDOWS\system32\DRIVERS\LVMVDrv.sys S3 LVUSBSta;Logitech USB Monitor Filter; C:\WINDOWS\system32\drivers\lvusbsta.sys S3 MBAMSwissArmy;MBAMSwissArmy; \??\C:\WINDOWS\system32\drivers\mbamswissarmy.sys S3 NABTSFEC;Codec NABTS/FEC VBI; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys S3 NdisIP;Connection TV/vidéo Microsoft; C:\WINDOWS\system32\DRIVERS\NdisIP.sys S3 ovt530;Webcam Classic; C:\WINDOWS\System32\Drivers\ov530vid.sys S3 PID_PEPI;Logitech QuickCam IM(PID_PEPI); C:\WINDOWS\system32\DRIVERS\LV302V32.SYS S3 SLIP;Détrameur décalage BDA; C:\WINDOWS\system32\DRIVERS\SLIP.sys S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys S3 usbaudio;Pilote USB audio (WDM); C:\WINDOWS\system32\drivers\usbaudio.sys S3 usbccgp;Pilote parent générique USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbccgp.sys S3 usbprint;Classe d'imprimantes USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbprint.sys S3 usbscan;Pilote de scanneur USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys S3 WSTCODEC;Codec Teletext standard; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys S3 X-Rite;X-Rite USB Service; C:\WINDOWS\system32\DRIVERS\XrUsb.sys S4 mchInjDrv;mchInjDrv; \??\C:\DOCUME~1\Shot\LOCALS~1\Temp\mc21.tmp R2 AntiVirService;Avira Protection temps réel; C:\Program Files\Avira\AntiVir Desktop\avguard.exe R2 AntiVirWebService;Avira Protection Web; C:\Program Files\Avira\AntiVir Desktop\AVWEBGRD.EXE R2 AOL ACS;AOL Connectivity Service; C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe R2 CLCapSvc;CyberLink Background Capture Service (CBCS); c:\APPS\Powercinema\Kernel\TV\CLCapSvc.exe R2 CLSched;CyberLink Task Scheduler (CTS); c:\APPS\Powercinema\Kernel\TV\CLSched.exe R2 CyberLink Media Library Service;CyberLink Media Library Service; C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLServer.exe R2 EpsonBidirectionalService;EpsonBidirectionalService; C:\Program Files\Fichiers communs\EPSON\EBAPI\eEBSVC.exe R2 EPSONStatusAgent2;EPSON Printer Status Agent2; C:\Program Files\Fichiers communs\EPSON\EBAPI\SAgent2.exe R2 GenericHidService;Generic Service for HID Keyboard Input Collections; c:\APPS\HIDSERVICE\HIDSERVICE.exe R2 hpqddsvc;Service HP CUE DeviceDiscovery; C:\WINDOWS\system32\svchost.exe R2 HPSLPSVC;HP Network Devices Support; C:\WINDOWS\system32\svchost.exe R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe R2 LVPrcSrv;Process Monitor; c:\program files\fichiers communs\logitech\lvmvfm\LVPrcSrv.exe R2 Net Driver HPZ12;Net Driver HPZ12; C:\WINDOWS\System32\svchost.exe R2 PixVue;PixVue; C:\Program Files\PixVue.Com\PixVue\bin\Daemon.exe R2 Pml Driver HPZ12;Pml Driver HPZ12; C:\WINDOWS\System32\svchost.exe R2 RetroExpLauncher;Retrospect Express HD Launcher; C:\Program Files\Retrospect\Retrospect Express HD 2.5\retrorun.exe R2 vsmon;TrueVector Internet Monitor; C:\WINDOWS\system32\ZoneLabs\vsmon.exe R3 hpqcxs08;hpqcxs08; C:\WINDOWS\system32\svchost.exe S2 LVSrvLauncher;LVSrvLauncher; C:\Program Files\Fichiers communs\Logitech\SrvLnch\SrvLnch.exe S2 Planificateur LiveUpdate automatique;Planificateur LiveUpdate automatique; C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe S3 gusvc;Google Updater Service; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Fichiers communs\InstallShield\Driver\1150\Intel 32\IDriverT.exe S3 idsvc;Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe S3 MySqlInventime;MySqlInventime; c:\mysql\bin\mysqld-max-nt MySqlInventime S3 ose;Office Source Engine; C:\Program Files\Fichiers communs\Microsoft Shared\Source Engine\OSE.EXE S3 SwitchBoard;SwitchBoard; C:\Program Files\Fichiers communs\Adobe\SwitchBoard\SwitchBoard.exe S3 UPnPService;UPnPService; C:\Program Files\Fichiers communs\MAGIX Shared\UPnPService\UPnPService.exe S3 WMPNetworkSvc;Service Partage réseau du Lecteur Windows Media; C:\Program Files\Windows Media Player\WMPNetwk.exe S3 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe -----------------EOF----------------- --------------------------------------- Info.txt ------------------- Logfile of random's system information tool 1.09 (written by random/random) Run by Shot at 2012-02-06 23:14:11 Microsoft Windows XP Édition familiale Service Pack 3 System drive C: has 4 GB (15%) free of 30 GB Total RAM: 1014 MB (39% free) Logfile of Trend Micro HijackThis v2.0.4 Scan saved at 23:14:59, on 06/02/2012 Platform: Windows XP SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v8.00 (8.00.6001.18702) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\csrss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\ZoneLabs\vsmon.exe C:\WINDOWS\system32\spoolsv.exe c:\program files\fichiers communs\logitech\lvmvfm\LV

Info45 · Answer 5 · Posté le 06/02/2012 à 23:27:36

J'ai l'impression que info.txt n'est pas entier je le reposte ci dessous ----------------------------------Info.txt-------------------------------- Logfile of random's system information tool 1.09 (written by random/random) Run by Shot at 2012-02-06 23:14:11 Microsoft Windows XP Édition familiale Service Pack 3 System drive C: has 4 GB (15%) free of 30 GB Total RAM: 1014 MB (39% free) Logfile of Trend Micro HijackThis v2.0.4 Scan saved at 23:14:59, on 06/02/2012 Platform: Windows XP SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v8.00 (8.00.6001.18702) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\csrss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\ZoneLabs\vsmon.exe C:\WINDOWS\system32\spoolsv.exe c:\program files\fichiers communs\logitech\lvmvfm\LVPrcSrv.exe C:\Program Files\Avira\AntiVir Desktop\sched.exe C:\Program Files\Fichiers communs\EPSON\EBAPI\eEBSVC.exe C:\Program Files\Avira\AntiVir Desktop\avguard.exe C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe c:\APPS\Powercinema\Kernel\TV\CLCapSvc.exe C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLServer.exe C:\Program Files\Fichiers communs\EPSON\EBAPI\SAgent2.exe c:\APPS\HIDSERVICE\HIDSERVICE.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\Java\jre6\bin\jqs.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\System32\svchost.exe C:\Program Files\PixVue.Com\PixVue\bin\Daemon.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Retrospect\Retrospect Express HD 2.5\retrorun.exe C:\WINDOWS\system32\svchost.exe c:\APPS\Powercinema\Kernel\TV\CLSched.exe C:\Program Files\Synaptics\SynTP\SynTPEnh.exe C:\WINDOWS\AGRSMMSG.exe C:\Program Files\Ask.com\Updater\Updater.exe C:\WINDOWS\system32\igfxtray.exe C:\WINDOWS\system32\hkcmd.exe C:\WINDOWS\system32\igfxpers.exe C:\Program Files\Avira\AntiVir Desktop\avgnt.exe C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\SuperCopier2\SuperCopier2.exe C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe C:\Program Files\Avira\AntiVir Desktop\avshadow.exe C:\Program Files\Avira\AntiVir Desktop\AVWEBGRD.EXE C:\Program Files\Orbitdownloader\orbitdm.exe C:\WINDOWS\system32\taskmgr.exe C:\WINDOWS\System32\alg.exe C:\WINDOWS\system32\wbem\wmiapsrv.exe C:\WINDOWS\system32\wbem\wmiprvse.exe C:\WINDOWS\system32\wuauclt.exe C:\Program Files\Microsoft Office\OFFICE11\WINWORD.EXE C:\Documents and Settings\Shot\Bureau\RSIT.exe C:\WINDOWS\system32\wbem\wmiprvse.exe C:\Program Files\trend micro\Shot.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://search.conduit.com?SearchSource=10&ctid=CT2613520 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://go.microsoft.com/fwlink/?LinkId=74005 R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens R3 - URLSearchHook: UrlSearchHook Class - {00000000-6E41-4FD3-8538-502F5495E5FC} - C:\Program Files\Ask.com\GenericAskToolbar.dll R3 - URLSearchHook: Protection ZoneAlarm Toolbar - {d7f26d0e-9801-45c3-a091-8a65e4ed73b5} - C:\Program Files\Protection_ZoneAlarm\prxtbProt.dll O2 - BHO: btorbit.com - {000123B4-9B42-4900-B3F7-F4B073EFC214} - C:\Program Files\Orbitdownloader\orbitcth.dll O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll O2 - BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file) O2 - BHO: EoRezoBHO - {64F56FC1-1272-44CD-BA6E-39723696E350} - (no file) O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: Ask Toolbar BHO - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll O2 - BHO: Protection ZoneAlarm - {d7f26d0e-9801-45c3-a091-8a65e4ed73b5} - C:\Program Files\Protection_ZoneAlarm\prxtbProt.dll O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll O2 - BHO: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll O3 - Toolbar: Copernic Agent - {F2E259E8-0FC8-438C-A6E0-342DD80FA53E} - C:\PROGRA~1\COPERN~1\COPERN~1.DLL O3 - Toolbar: &PixVue - {B28B4479-D9C2-41D1-B74D-74A1827037CD} - C:\Program Files\PixVue.Com\PixVue\bin\PixVue.dll O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll O3 - Toolbar: PrivBar - {300BC64A-BF32-4cc8-8917-91148CEFE700} - c:\progra~1\DropMyRights\PrivBar.dll O3 - Toolbar: Grab Pro - {C55BBCD6-41AD-48AD-9953-3609C48EACC7} - C:\Program Files\Orbitdownloader\GrabPro.dll O3 - Toolbar: Protection ZoneAlarm Toolbar - {d7f26d0e-9801-45c3-a091-8a65e4ed73b5} - C:\Program Files\Protection_ZoneAlarm\prxtbProt.dll O3 - Toolbar: Ask Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll O4 - HKLM\..\Run: "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32 O4 - HKLM\..\Run: C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC O4 - HKLM\..\Run: C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName O4 - HKLM\..\Run: HDAShCut.exe O4 - HKLM\..\Run: C:\Program Files\Synaptics\SynTP\SynTPEnh.exe O4 - HKLM\..\Run: AGRSMMSG.exe O4 - HKLM\..\Run: C:\WINDOWS\system32\NeroCheck.exe O4 - HKLM\..\Run: "C:\Program Files\Ask.com\Updater\Updater.exe" O4 - HKLM\..\Run: C:\WINDOWS\system32\igfxtray.exe O4 - HKLM\..\Run: C:\WINDOWS\system32\hkcmd.exe O4 - HKLM\..\Run: C:\WINDOWS\system32\igfxpers.exe O4 - HKLM\..\Run: "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min O4 - HKLM\..\Run: "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe" O4 - HKCU\..\Run: C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: C:\Program Files\SuperCopier2\SuperCopier2.exe O4 - HKCU\..\Run: C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe O4 - HKUS\S-1-5-19\..\Run: C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL') O4 - HKUS\S-1-5-20\..\Run: C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU') O4 - HKUS\S-1-5-18\..\Run: C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: C:\WINDOWS\system32\CTFMON.EXE (User 'Default user') O4 - Global Startup: MonacoGamma.lnk = C:\Program Files\Monaco Systems\MonacoOPTIX 2.0\MonacoGamma.exe O8 - Extra context menu item: &Download by Orbit - res://C:\Program Files\Orbitdownloader\orbitmxt.dll/201 O8 - Extra context menu item: &Grab video by Orbit - res://C:\Program Files\Orbitdownloader\orbitmxt.dll/204 O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\WINDOWS\system32\GPhotos.scr/200 O8 - Extra context menu item: Do&wnload selected by Orbit - res://C:\Program Files\Orbitdownloader\orbitmxt.dll/203 O8 - Extra context menu item: Down&load all by Orbit - res://C:\Program Files\Orbitdownloader\orbitmxt.dll/202 O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000 O9 - Extra button: Run WinHTTrack - {36ECAF82-3300-8F84-092E-AFF36D6C7040} - C:\Program Files\WinHTTrack\WinHTTrackIEBar.dll O9 - Extra 'Tools' menuitem: Launch WinHTTrack - {36ECAF82-3300-8F84-092E-AFF36D6C7040} - C:\Program Files\WinHTTrack\WinHTTrackIEBar.dll O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL O9 - Extra button: Afficher ou masquer l'HP Smart Web Printing - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O14 - IERESET.INF: START_PAGE_URL=file://C:\APPS\IE\offline\fr.htm O16 - DPF: {2C7B74DE-3A9E-4CD3-A8DB-47411E9680A8} (VirginMega.DML.Interface) - http://alice.vm-wl.com/Telechargement/DownManLight.cab O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll O16 - DPF: {56762DEC-6B0D-4AB4-A8AD-989993B5D08B} (OnlineScanner Control) - http://www.eset.eu/buxus/docs/OnlineScanner.cab O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab O16 - DPF: {DEB21AD3-FDA4-42F6-B57D-EE696A675EE8} (IPSUploader Control) - http://as.photoprintit.de/ips-opdata/layout/default01/activex/IPSUploader.cab O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} (get_atlcom Class) - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab O18 - Protocol: bw+0 - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw+0s - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw-0 - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw-0s - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw00 - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw00s - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw10 - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw10s - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw20 - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw20s - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw30 - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw30s - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw40 - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw40s - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw50 - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw50s - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw60 - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw60s - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw70 - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw70s - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw80 - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw80s - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw90 - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw90s - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwa0 - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwa0s - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwb0 - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwb0s - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwc0 - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwc0s - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwd0 - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwd0s - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwe0 - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwe0s - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwf0 - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwf0s - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll O18 - Protocol: bwg0 - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwg0s - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwh0 - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwh0s - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwi0 - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwi0s - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwj0 - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwj0s - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwk0 - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwk0s - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwl0 - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwl0s - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwm0 - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwm0s - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwn0 - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwn0s - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwo0 - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwo0s - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwp0 - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwp0s - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwq0 - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwq0s - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwr0 - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwr0s - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bws0 - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bws0s - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwt0 - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwt0s - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwu0 - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwu0s - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwv0 - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwv0s - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bww0 - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bww0s - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwx0 - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwx0s - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwy0 - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwy0s - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwz0 - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwz0s - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: offline-8876480 - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O22 - SharedTaskScheduler: Pré-chargeur Browseui - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll O22 - SharedTaskScheduler: Démon de cache des catégories de composant - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll O23 - Service: Avira Planificateur (AntiVirSchedulerService) - Avira Operations GmbH & Co. KG - C:\Program Files\Avira\AntiVir Desktop\sched.exe O23 - Service: Avira Protection temps réel (AntiVirService) - Avira Operations GmbH & Co. KG - C:\Program Files\Avira\AntiVir Desktop\avguard.exe O23 - Service: Avira Protection Web (AntiVirWebService) - Avira Operations GmbH & Co. KG - C:\Program Files\Avira\AntiVir Desktop\AVWEBGRD.EXE O23 - Service: AOL Connectivity Service (AOL ACS) - America Online, Inc. - C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - c:\APPS\Powercinema\Kernel\TV\CLCapSvc.exe O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - c:\APPS\Powercinema\Kernel\TV\CLSched.exe O23 - Service: CyberLink Media Library Service - Cyberlink - C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLServer.exe O23 - Service: Service d'administration du Gestionnaire de disque logique (dmadmin) - Unknown owner - C:\WINDOWS\System32\dmadmin.exe O23 - Service: EpsonBidirectionalService - Unknown owner - C:\Program Files\Fichiers communs\EPSON\EBAPI\eEBSVC.exe O23 - Service: EPSON Printer Status Agent2 (EPSONStatusAgent2) - SEIKO EPSON CORPORATION - C:\Program Files\Fichiers communs\EPSON\EBAPI\SAgent2.exe O23 - Service: Journal des événements (Eventlog) - Unknown owner - C:\WINDOWS\system32\services.exe O23 - Service: Generic Service for HID Keyboard Input Collections (GenericHidService) - Unknown owner - c:\APPS\HIDSERVICE\HIDSERVICE.exe O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1150\Intel 32\IDriverT.exe O23 - Service: Service COM de gravage de CD IMAPI (ImapiService) - Unknown owner - C:\WINDOWS\system32\imapi.exe O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe O23 - Service: Process Monitor (LVPrcSrv) - Logitech Inc. - c:\program files\fichiers communs\logitech\lvmvfm\LVPrcSrv.exe O23 - Service: LVSrvLauncher - Logitech Inc. - C:\Program Files\Fichiers communs\Logitech\SrvLnch\SrvLnch.exe O23 - Service: Partage de Bureau à distance NetMeeting (mnmsrvc) - Unknown owner - C:\WINDOWS\system32\mnmsrvc.exe O23 - Service: MySqlInventime - Unknown owner - c:\mysql\bin\mysqld-max-nt.exe O23 - Service: PixVue - PixVue.Com - C:\Program Files\PixVue.Com\PixVue\bin\Daemon.exe O23 - Service: Planificateur LiveUpdate automatique - Unknown owner - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe (file missing) O23 - Service: Plug-and-Play (PlugPlay) - Unknown owner - C:\WINDOWS\system32\services.exe O23 - Service: Gestionnaire de session d'aide sur le Bureau à distance (RDSessMgr) - Unknown owner - C:\WINDOWS\system32\sessmgr.exe O23 - Service: Retrospect Express HD Launcher (RetroExpLauncher) - EMC Corporation - C:\Program Files\Retrospect\Retrospect Express HD 2.5\retrorun.exe O23 - Service: Carte à puce (SCardSvr) - Unknown owner - C:\WINDOWS\System32\SCardSvr.exe O23 - Service: SwitchBoard - Adobe Systems Incorporated - C:\Program Files\Fichiers communs\Adobe\SwitchBoard\SwitchBoard.exe O23 - Service: Journaux et alertes de performance (SysmonLog) - Unknown owner - C:\WINDOWS\system32\smlogsvc.exe O23 - Service: UPnPService - Magix AG - C:\Program Files\Fichiers communs\MAGIX Shared\UPnPService\UPnPService.exe O23 - Service: TrueVector Internet Monitor (vsmon) - Check Point Software Technologies LTD - C:\WINDOWS\system32\ZoneLabs\vsmon.exe O23 - Service: Cliché instantané de volume (VSS) - Unknown owner - C:\WINDOWS\System32\vssvc.exe O23 - Service: Carte de performance WMI (WmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\wmiapsrv.exe O23 - Service: Service Partage réseau du Lecteur Windows Media (WMPNetworkSvc) - Unknown owner - C:\Program Files\Windows Media Player\WMPNetwk.exe -- End of file - 27197 bytes ======Scheduled tasks folder====== C:\WINDOWS\tasks\AdobeAAMUpdater-1.0-SN012345678912-Utilisateur.job C:\WINDOWS\tasks\ParetoLogic Registration3.job C:\WINDOWS\tasks\Scheduled Update for Ask Toolbar.job =========Mozilla firefox========= ProfilePath - C:\Documents and Settings\Shot\Application Data\Mozilla\Firefox\Profiles\8lrhl7pf.default prefs.js - "browser.search.useDBForOrder" - true prefs.js - "browser.startup.homepage" - "file:///E:/Travail/Informatique/Develop/FrontPage/MonSiteWeb/index.htm|http://www.infos-du-net.com/forum/9869-10-ntfs-fat32|http://www.jurixt.com/xp/xp_15.htm|http://www.trucs-et-astuces-windows.com/technique_pc/choix_ntfs_fat.html" prefs.js - "extensions.enabledItems" - "{20a82645-c095-46ed-80e3-08825760534b}:1.2.1, {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}:6.0.20, jqs@sun.com:1.0, smartwebprinting@hp.com:4.51, {d7f26d0e-9801-45c3-a091-8a65e4ed73b5}:2.7.1.3, {35379F86-8CCB-4724-AE33-4278DE266C70}:1.0.5, {972ce4c6-7e08-4474-a285-3208198ce6fd}:3.6.17" prefs.js - "keyword.URL" - "chrome://browser-region/locale/region.properties" "{20a82645-c095-46ed-80e3-08825760534b}"=C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\ "jqs@sun.com"=C:\Program Files\Java\jre6\lib\deploy\jqs\ff "smartwebprinting@hp.com"=C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 "Description"=Adobe® Flash® Player 10.1 Plugin "Path"=C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll "Description"=Canon MycameraPlugin "Path"=C:\Program Files\Canon\MyCamera Download Plugin\NPCIG.dll "Description"=ZoneAlarm Toolbar Api "Path"=C:\Program Files\CheckPoint\ZAForceField\TrustChecker\bin\npFFApi.dll "Description"=Picasa3 plugin "Path"=C:\Program Files\Picasa3\npPicasa3.dll "Description"=WLPG Install MIME type "Path"=C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll "Description"=Windows Presentation Foundation plug-in for Mozilla browsers "Path"=C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll "Description"=Viewpoint Media Player for Mozilla "Path"=C:\Program Files\Viewpoint\Viewpoint Experience Technology\npViewpoint.dll "Description"=Handles PDFs in-place in Firefox "Path"=C:\Program Files\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll "Description"=Yahoo! activeX Plug-in Bridge "Path"=C:\Program Files\Yahoo!\Common\npyaxmpb.dll C:\Program Files\Mozilla Firefox\extensions\ {972ce4c6-7e08-4474-a285-3208198ce6fd} C:\Program Files\Mozilla Firefox\components\ binary.manifest browsercomps.dll nsIQTScriptablePlugin.xpt C:\Program Files\Mozilla Firefox\plugins\ np-mswmp.dll npdeployJava1.dll NPOFFICE.DLL nppdf32.dll nppdf32.FRA npqtplugin.dll npqtplugin2.dll npqtplugin3.dll npqtplugin4.dll npqtplugin5.dll npqtplugin6.dll npqtplugin7.dll np_gp.dll nsIQTScriptablePlugin.xpt QuickTimePlugin.class WMP Firefox Plugin License.rtf WMP Firefox Plugin RelNotes.txt C:\Program Files\Mozilla Firefox\searchplugins\ amazon-france.xml bing.xml cnrtl-tlfi-fr.xml eBay-france.xml google.xml wikipedia-fr.xml yahoo-france.xml C:\Documents and Settings\Shot\Application Data\Mozilla\Firefox\Profiles\8lrhl7pf.default\extensions\ toolbar@ask.com {20a82645-c095-46ed-80e3-08825760534b} {d7f26d0e-9801-45c3-a091-8a65e4ed73b5} C:\Documents and Settings\Shot\Application Data\Mozilla\Firefox\Profiles\8lrhl7pf.default\searchplugins\ askcom.xml conduit.xml ======Registry dump====== Octh Class - C:\Program Files\Orbitdownloader\orbitcth.dll Yahoo! Toolbar Helper - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll HP Print Enhancer - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll Adobe PDF Link Helper - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll Spybot-S&D IE Protection - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll Programme d'aide de l'Assistant de connexion Windows Live - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll Ask Toolbar - C:\Program Files\Ask.com\GenericAskToolbar.dll Protection ZoneAlarm Toolbar - C:\Program Files\Protection_ZoneAlarm\prxtbProt.dll Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll HP Smart BHO Class - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll {F2E259E8-0FC8-438C-A6E0-342DD80FA53E} - Copernic Agent - C:\PROGRA~1\COPERN~1\COPERN~1.DLL {B28B4479-D9C2-41D1-B74D-74A1827037CD} - &PixVue - C:\Program Files\PixVue.Com\PixVue\bin\PixVue.dll {EF99BD32-C1FB-11D2-892F-0090271D4F88} - Yahoo! Toolbar avec bloqueur de fenêtres pop-up - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll {300BC64A-BF32-4cc8-8917-91148CEFE700} - PrivBar - c:\progra~1\DropMyRights\PrivBar.dll {C55BBCD6-41AD-48AD-9953-3609C48EACC7} - Grab Pro - C:\Program Files\Orbitdownloader\GrabPro.dll {d7f26d0e-9801-45c3-a091-8a65e4ed73b5} - Protection ZoneAlarm Toolbar - C:\Program Files\Protection_ZoneAlarm\prxtbProt.dll {D4027C7F-154A-4066-A1AD-4243D8127440} - Ask Toolbar - C:\Program Files\Ask.com\GenericAskToolbar.dll "IMJPMIG8.1"=C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE "PHIME2002ASync"=C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE "PHIME2002A"=C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE "Raccourci vers la page des propriétés de High Definition Audio"=C:\WINDOWS\system32\HDAShCut.exe "SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe "AGRSMMSG"=C:\WINDOWS\AGRSMMSG.exe "NeroFilterCheck"=C:\WINDOWS\system32\NeroCheck.exe ""= "IgfxTray"=C:\WINDOWS\system32\igfxtray.exe "HotKeysCmds"=C:\WINDOWS\system32\hkcmd.exe "Persistence"=C:\WINDOWS\system32\igfxpers.exe "avgnt"=C:\Program Files\Avira\AntiVir Desktop\avgnt.exe "ZoneAlarm Client"=C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe "CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe "SuperCopier2.exe"=C:\Program Files\SuperCopier2\SuperCopier2.exe "SpybotSD TeaTimer"=C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe "AdobeBridge"= C:\Program Files\Fichiers communs\Adobe\ARM\1.0\AdobeARM.exe C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe C:\Program Files\Fichiers communs\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe C:\Program Files\Fichiers communs\Adobe\CS5.5ServiceManager\CS5.5ServiceManager.exe F:\OI\Tutorom\Asuite1512\asuite.exe C:\Program Files\DAEMON Tools Lite\DTLite.exe C:\Program Files\HP\HP Software Update\HPWuSchd2.exe C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe C:\Program Files\Fichiers communs\Logitech\LComMgr\Communications_Helper.exe C:\Program Files\Logitech\QuickCam10\QuickCam10.exe C:\Program Files\Fichiers communs\Logitech\LComMgr\LVComSX.exe c:\Apps\Powercinema\PCMService.exe C:\Program Files\QuickTime\qttask.exe C:\Program Files\Real\RealPlayer\RealPlay.exe C:\PROGRA~1\RETROS~1\RETROS~1.5\RetroExpress.exe C:\WINDOWS\RTHDCPL.EXE C:\Program Files\Fichiers communs\Java\Java Update\jusched.exe C:\Program Files\Fichiers communs\Adobe\SwitchBoard\SwitchBoard.exe C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage MonacoGamma.lnk - C:\Program Files\Monaco Systems\MonacoOPTIX 2.0\MonacoGamma.exe C:\WINDOWS\system32\igfxdev.dll C:\Program Files\PixVue.Com\PixVue\bin\WinLogon.DLL C:\WINDOWS\system32\WgaLogon.dll WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll "notification packages"=:\WINDOWS\syste "dontdisplaylastusername"=0 "legalnoticecaption"= "legalnoticetext"= "shutdownwithoutlogon"=1 "undockwithoutlogon"=1 "NoDriveTypeAutoRun"=145 "NoDriveAutoRun"=67108863 "NoDriveTypeAutoRun"=255 "HonorAutoRunSetting"=1 "%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000" "%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019" "C:\Program Files\MSN Messenger\livecall.exe"="C:\Program Files\MSN Messenger\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)" "C:\Program Files\Orbitdownloader\orbitdm.exe"="C:\Program Files\Orbitdownloader\orbitdm.exe:*:Enabled:Orbit" "C:\Program Files\Orbitdownloader\orbitnet.exe"="C:\Program Files\Orbitdownloader\orbitnet.exe:*:Enabled:Orbit" "C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe:*:Enabled:hpqtra08.exe" "C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe:*:Enabled:hpqste08.exe" "C:\Program Files\HP\Digital Imaging\bin\hposid01.exe"="C:\Program Files\HP\Digital Imaging\bin\hposid01.exe:*:Enabled:hposid01.exe" "C:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe:*:Enabled:hpqkygrp.exe" "C:\Program Files\HP\Digital Imaging\bin\hpfcCopy.exe"="C:\Program Files\HP\Digital Imaging\bin\hpfcCopy.exe:*:Enabled:hpfccopy.exe" "C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe"="C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe:*:Enabled:hpoews01.exe" "C:\Program Files\HP\Digital Imaging\bin\hpiscnapp.exe"="C:\Program Files\HP\Digital Imaging\bin\hpiscnapp.exe:*:Enabled:hpiscnapp.exe" "C:\Program Files\HP\Digital Imaging\bin\hpqgplgtupl.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqgplgtupl.exe:*:Enabled:hpqgplgtupl.exe" "C:\Program Files\HP\Digital Imaging\bin\hpqgpc01.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqgpc01.exe:*:Enabled:hpqgpc01.exe" "C:\Program Files\HP\Digital Imaging\bin\hpqusgm.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqusgm.exe:*:Enabled:hpqusgm.exe" "C:\Program Files\HP\Digital Imaging\bin\hpqusgh.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqusgh.exe:*:Enabled:hpqusgh.exe" "C:\Program Files\HP\HP Software Update\HPWUCli.exe"="C:\Program Files\HP\HP Software Update\HPWUCli.exe:*:Enabled:hpwucli.exe" "C:\Program Files\HP\Digital Imaging\smart web printing\SmartWebPrintExe.exe"="C:\Program Files\HP\Digital Imaging\smart web printing\SmartWebPrintExe.exe:*:Enabled:smartwebprintexe.exe" "C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger" "C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe"="C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe:*:Enabled:Windows Live FolderShare" "C:\WINDOWS\system32\ZoneLabs\vsmon.exe"="C:\WINDOWS\system32\ZoneLabs\vsmon.exe:*:Enabled:vsmon" "%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000" "%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019" "C:\Program Files\MSN Messenger\livecall.exe"="C:\Program Files\MSN Messenger\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)" "C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe:*:Enabled:hpqtra08.exe" "C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe:*:Enabled:hpqste08.exe" "C:\Program Files\HP\Digital Imaging\bin\hposid01.exe"="C:\Program Files\HP\Digital Imaging\bin\hposid01.exe:*:Enabled:hposid01.exe" "C:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe:*:Enabled:hpqkygrp.exe" "C:\Program Files\HP\Digital Imaging\bin\hpfcCopy.exe"="C:\Program Files\HP\Digital Imaging\bin\hpfcCopy.exe:*:Enabled:hpfccopy.exe" "C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe"="C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe:*:Enabled:hpoews01.exe" "C:\Program Files\HP\Digital Imaging\bin\hpiscnapp.exe"="C:\Program Files\HP\Digital Imaging\bin\hpiscnapp.exe:*:Enabled:hpiscnapp.exe" "C:\Program Files\HP\Digital Imaging\bin\hpqgplgtupl.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqgplgtupl.exe:*:Enabled:hpqgplgtupl.exe" "C:\Program Files\HP\Digital Imaging\bin\hpqgpc01.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqgpc01.exe:*:Enabled:hpqgpc01.exe" "C:\Program Files\HP\Digital Imaging\bin\hpqusgm.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqusgm.exe:*:Enabled:hpqusgm.exe" "C:\Program Files\HP\Digital Imaging\bin\hpqusgh.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqusgh.exe:*:Enabled:hpqusgh.exe" "C:\Program Files\HP\HP Software Update\HPWUCli.exe"="C:\Program Files\HP\HP Software Update\HPWUCli.exe:*:Enabled:hpwucli.exe" "C:\Program Files\HP\Digital Imaging\smart web printing\SmartWebPrintExe.exe"="C:\Program Files\HP\Digital Imaging\smart web printing\SmartWebPrintExe.exe:*:Enabled:smartwebprintexe.exe" "C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger" "C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe"="C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe:*:Enabled:Windows Live FolderShare" "midimapper"=midimap.dll "msacm.imaadpcm"=imaadp32.acm "msacm.msadpcm"=msadp32.acm "msacm.msg711"=msg711.acm "msacm.msgsm610"=msgsm32.acm "msacm.trspch"=tssoft32.acm "vidc.cvid"=iccvid.dll "VIDC.I420"=lvcodec2.dll "vidc.iv31"=ir32_32.dll "vidc.iv32"=ir32_32.dll "vidc.iv41"=ir41_32.ax "VIDC.IYUV"=iyuv_32.dll "vidc.mrle"=msrle32.dll "vidc.msvc"=msvidc32.dll "VIDC.UYVY"=msyuv.dll "VIDC.YUY2"=msyuv.dll "VIDC.YVU9"=tsbyuv.dll "VIDC.YVYU"=msyuv.dll "wavemapper"=msacm32.drv "msacm.msg723"=msg723.acm "vidc.M263"=msh263.drv "vidc.M261"=msh261.drv "msacm.msaudio1"=msaud32.acm "msacm.sl_anet"=sl_anet.acm "msacm.iac2"=C:\WINDOWS\system32\iac25_32.ax "vidc.iv50"=ir50_32.dll "msacm.l3acm"=C:\WINDOWS\system32\l3codeca.acm "wave"=wdmaud.drv "midi"=wdmaud.drv "mixer"=wdmaud.drv "aux"=wdmaud.drv "msacm.siren"=sirenacm.dll "MSVideo8"=VfWWDM32.dll "MSVideo"=vfwwdm32.dll "wave1"=wdmaud.drv "midi1"=wdmaud.drv "mixer1"=wdmaud.drv "aux1"=wdmaud.drv "vidc.ptev"=PteVideo.dll "VIDC.MPG4"=mpg4c32.dll "VIDC.MP42"=mpg4c32.dll ======File associations====== .js - edit - .js - open - ======List of files/folders created in the last 1 month====== 2012-02-06 23:14:12 ----D---- C:\Program Files\trend micro 2012-02-06 23:14:11 ----D---- C:\rsit 2012-02-04 19:23:50 ----A---- C:\WINDOWS\system32\vsregexp.dll 2012-02-04 19:23:47 ----A---- C:\WINDOWS\system32\zlcommdb.dll 2012-02-04 19:23:47 ----A---- C:\WINDOWS\system32\zlcomm.dll 2012-02-04 19:23:37 ----A---- C:\WINDOWS\system32\vswmi.dll 2012-02-04 19:23:35 ----A---- C:\WINDOWS\system32\zpeng25.dll 2012-02-04 19:23:35 ----A---- C:\WINDOWS\system32\vsxml.dll 2012-02-04 19:23:34 ----D---- C:\WINDOWS\system32\ZoneLabs 2012-02-04 19:23:34 ----A---- C:\WINDOWS\system32\vspubapi.dll 2012-02-04 19:23:34 ----A---- C:\WINDOWS\system32\vsmonapi.dll 2012-02-04 19:23:30 ----A---- C:\WINDOWS\system32\vsdatant.sys 2012-02-04 19:23:29 ----D---- C:\Program Files\Zone Labs 2012-02-04 19:22:37 ----A---- C:\WINDOWS\system32\vsdata.dll 2012-02-04 19:22:36 ----A---- C:\WINDOWS\system32\vsutil.dll 2012-02-04 19:22:36 ----A---- C:\WINDOWS\system32\vsinit.dll 2012-02-04 19:19:45 ----D---- C:\WINDOWS\Internet Logs 2012-02-04 18:54:58 ----D---- C:\Program Files\Conduit 2012-02-04 18:54:53 ----D---- C:\Program Files\Protection_ZoneAlarm 2012-02-04 18:54:02 ----AH---- C:\WINDOWS\system32\zllictbl.dat 2012-02-04 18:53:51 ----A---- C:\WINDOWS\system32\vsutil_loc040c.dll 2012-02-04 13:49:06 ----D---- C:\Documents and Settings\All Users\Application Data\CheckPoint 2012-01-22 22:21:25 ----D---- C:\Documents and Settings\All Users\Application Data\Retrospect 2012-01-22 18:25:45 ----D---- C:\Documents and Settings\Shot\Application Data\Avira 2012-01-22 18:07:42 ----A---- C:\WINDOWS\system32\drivers\avkmgr.sys 2012-01-22 18:07:42 ----A---- C:\WINDOWS\system32\drivers\avipbb.sys 2012-01-22 18:07:42 ----A---- C:\WINDOWS\system32\drivers\avgntflt.sys 2012-01-22 18:07:17 ----D---- C:\Program Files\Avira 2012-01-22 18:07:17 ----D---- C:\Documents and Settings\All Users\Application Data\Avira 2012-01-19 09:13:26 ----HDC---- C:\WINDOWS\$NtUninstallKB2585542$ 2012-01-16 11:17:59 ----HDC---- C:\WINDOWS\$NtUninstallKB2646524$ 2012-01-16 11:17:42 ----HDC---- C:\WINDOWS\$NtUninstallKB2631813$ 2012-01-16 11:12:39 ----HDC---- C:\WINDOWS\$NtUninstallKB2598479$ 2012-01-16 11:12:23 ----HDC---- C:\WINDOWS\$NtUninstallKB2603381$ 2012-01-16 11:12:04 ----HDC---- C:\WINDOWS\$NtUninstallKB2584146$ ======List of files/folders modified in the last 1 month====== 2012-02-06 23:14:28 ----D---- C:\WINDOWS\Prefetch 2012-02-06 23:14:18 ----D---- C:\WINDOWS\Temp 2012-02-06 23:14:12 ----RHD---- C:\Program Files 2012-02-06 23:10:15 ----D---- C:\Documents and Settings\Shot\Application Data\Orbit 2012-02-06 23:08:12 ----D---- C:\WINDOWS\system32\CatRoot2 2012-02-06 23:06:37 ----A---- C:\WINDOWS\SchedLgU.Txt 2012-02-06 14:39:30 ----SHD---- C:\System Volume Information 2012-02-06 14:37:44 ----D---- C:\WINDOWS\system32\NtmsData 2012-02-06 11:41:09 ----D---- C:\Program Files\CRESUS2 2012-02-06 11:41:09 ----A---- C:\WINDOWS\win.ini 2012-02-06 10:16:35 ----D---- C:\WINDOWS\Registration 2012-02-05 21:27:43 ----HD---- C:\WINDOWS 2012-02-05 15:53:24 ----SD---- C:\WINDOWS\Tasks 2012-02-05 11:40:50 ----D---- C:\downloads 2012-02-04 23:52:51 ----SHD---- C:\WINDOWS\Installer 2012-02-04 23:52:50 ----D---- C:\Program Files\Ask.com 2012-02-04 20:07:50 ----HD---- C:\Config.Msi 2012-02-04 19:24:00 ----AD---- C:\WINDOWS\system32 2012-02-04 18:54:04 ----D---- C:\Program Files\CheckPoint 2012-02-04 13:52:40 ----D---- C:\WINDOWS\WinSxS 2012-02-04 13:33:58 ----RASH---- C:\BOOT.INI 2012-02-04 13:33:58 ----A---- C:\WINDOWS\system.ini 2012-02-04 13:21:55 ----D---- C:\Program Files\Geneatique2012 2012-02-04 13:20:14 ----D---- C:\Documents and Settings\All Users\Application Data\RetroExp 2012-02-04 09:57:06 ----A---- C:\WINDOWS\NeroDigital.ini 2012-02-02 17:14:01 ----D---- C:\Program Files\Mozilla Firefox 2012-01-22 22:24:30 ----D---- C:\Program Files\Retrospect 2012-01-22 21:55:50 ----D---- C:\Documents and Settings\Shot\Application Data\HPAppData 2012-01-22 21:19:07 ----D---- C:\WINDOWS\REPAIR 2012-01-22 18:43:50 ----HD---- C:\WINDOWS\inf 2012-01-22 18:07:42 ----D---- C:\WINDOWS\system32\drivers 2012-01-19 09:31:53 ----D---- C:\Documents and Settings\All Users\Application Data\Adobe 2012-01-19 09:31:40 ----D---- C:\Program Files\Fichiers communs\Adobe 2012-01-19 09:14:19 ----RSHD---- C:\WINDOWS\system32\dllcache 2012-01-19 01:07:43 ----HD---- C:\WINDOWS\$hf_mig$ 2012-01-16 11:18:04 ----A---- C:\WINDOWS\imsins.BAK 2012-01-16 11:12:58 ----A---- C:\WINDOWS\system32\MRT.exe 2012-01-16 10:40:47 ----D---- C:\Program Files\Adobe 2012-01-16 10:37:22 ----D---- C:\Documents and Settings\Shot\Application Data\Adobe ======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R0 agp440;Filtre de bus AGP Intel; C:\WINDOWS\system32\DRIVERS\agp440.sys R0 agpCPQ;Filtre de bus AGP Compaq; C:\WINDOWS\system32\DRIVERS\agpCPQ.sys R0 alim1541;Filtre de bus AGP ALI; C:\WINDOWS\system32\DRIVERS\alim1541.sys R0 amdagp;Pilote de filtre du bus AMD AGP; C:\WINDOWS\system32\DRIVERS\amdagp.sys R0 cbidf;cbidf; C:\WINDOWS\system32\DRIVERS\cbidf2k.sys R0 PxHelp20;PxHelp20; C:\WINDOWS\System32\Drivers\PxHelp20.sys R0 sisagp;Filtre de bus AGP SIS; C:\WINDOWS\system32\DRIVERS\sisagp.sys R0 sptd;sptd; C:\WINDOWS\System32\Drivers\sptd.sys R0 viaagp;Filtre de bus AGP VIA; C:\WINDOWS\system32\DRIVERS\viaagp.sys R1 avipbb;avipbb; C:\WINDOWS\system32\DRIVERS\avipbb.sys R1 avkmgr;avkmgr; C:\WINDOWS\system32\DRIVERS\avkmgr.sys R1 intelppm;Pilote de processeur Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys R1 PQNTDrv;PQNTDrv; C:\WINDOWS\system32\drivers\PQNTDrv.sys R1 ssmdrv;ssmdrv; C:\WINDOWS\system32\DRIVERS\ssmdrv.sys R1 WS2IFSL;Environnement de prise en charge de Fournisseur de services non-IFS Windows Sockets 2.0; C:\WINDOWS\System32\drivers\ws2ifsl.sys R2 ASCTRM;ASCTRM; C:\WINDOWS\system32\drivers\ASCTRM.sys R2 avgntflt;avgntflt; C:\WINDOWS\system32\DRIVERS\avgntflt.sys R2 vsdatant;vsdatant; C:\WINDOWS\System32\vsdatant.sys R3 Afc;PPdus ASPI Shell; C:\WINDOWS\system32\drivers\Afc.sys R3 AgereSoftModem;Agere Systems Soft Modem; C:\WINDOWS\system32\DRIVERS\AGRSM.sys R3 HDAudBus;Pilote de bus Microsoft UAA pour High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys R3 HidUsb;Pilote de classe HID Microsoft; C:\WINDOWS\system32\DRIVERS\hidusb.sys R3 ialm;ialm; C:\WINDOWS\system32\DRIVERS\igxpmp32.sys R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys R3 LVPr2Mon;Logitech LVPr2Mon Driver; C:\WINDOWS\system32\DRIVERS\LVPr2Mon.sys R3 mouhid;Pilote HID de souris; C:\WINDOWS\system32\DRIVERS\mouhid.sys R3 RTL8023xp;Realtek 10/100/1000 NIC Family all in one NDIS XP Driver; C:\WINDOWS\system32\DRIVERS\Rtlnicxp.sys R3 SynTP;Synaptics TouchPad Driver; C:\WINDOWS\system32\DRIVERS\SynTP.sys R3 USBSTOR;Pilote de stockage de masse USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS R3 usbuhci;Pilote miniport de contrôleur hôte universel USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys R3 w29n51;Pilote de carte de connexion réseau Intel(R) PRO/Wireless 2200BG pour Windows XP; C:\WINDOWS\system32\DRIVERS\w29n51.sys R3 wanatw;WAN Miniport (ATW); C:\WINDOWS\system32\DRIVERS\wanatw4.sys S0 srescan;srescan; C:\WINDOWS\system32\ZoneLabs\srescan.sys S2 adfs;adfs; C:\WINDOWS\system32\drivers\adfs.sys S3 catchme;catchme; \??\C:\DOCUME~1\UTILIS~1\LOCALS~1\Temp\catchme.sys S3 HdAudAddService;Pilote de fonction Microsoft UAA pour Service High Definition Audio; C:\WINDOWS\system32\drivers\HdAudio.sys S3 HPZid412;IEEE-1284.4 Driver HPZid412; C:\WINDOWS\system32\DRIVERS\HPZid412.sys S3 HPZipr12;Print Class Driver for IEEE-1284.4 HPZipr12; C:\WINDOWS\system32\DRIVERS\HPZipr12.sys S3 HPZius12;USB to IEEE-1284.4 Translation Driver HPZius12; C:\WINDOWS\system32\DRIVERS\HPZius12.sys S3 LVcKap;Logitech AEC Driver; C:\WINDOWS\system32\DRIVERS\LVcKap.sys S3 LVMVDrv;Logitech Machine Vision Engine Loader; C:\WINDOWS\system32\DRIVERS\LVMVDrv.sys S3 LVUSBSta;Logitech USB Monitor Filter; C:\WINDOWS\system32\drivers\lvusbsta.sys S3 MBAMSwissArmy;MBAMSwissArmy; \??\C:\WINDOWS\system32\drivers\mbamswissarmy.sys S3 NABTSFEC;Codec NABTS/FEC VBI; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys S3 NdisIP;Connection TV/vidéo Microsoft; C:\WINDOWS\system32\DRIVERS\NdisIP.sys S3 ovt530;Webcam Classic; C:\WINDOWS\System32\Drivers\ov530vid.sys S3 PID_PEPI;Logitech QuickCam IM(PID_PEPI); C:\WINDOWS\system32\DRIVERS\LV302V32.SYS S3 SLIP;Détrameur décalage BDA; C:\WINDOWS\system32\DRIVERS\SLIP.sys S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys S3 usbaudio;Pilote USB audio (WDM); C:\WINDOWS\system32\drivers\usbaudio.sys S3 usbccgp;Pilote parent générique USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbccgp.sys S3 usbprint;Classe d'imprimantes USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbprint.sys S3 usbscan;Pilote de scanneur USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys S3 WSTCODEC;Codec Teletext standard; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys S3 X-Rite;X-Rite USB Service; C:\WINDOWS\system32\DRIVERS\XrUsb.sys S4 mchInjDrv;mchInjDrv; \??\C:\DOCUME~1\Shot\LOCALS~1\Temp\mc21.tmp R2 AntiVirService;Avira Protection temps réel; C:\Program Files\Avira\AntiVir Desktop\avguard.exe R2 AntiVirWebService;Avira Protection Web; C:\Program Files\Avira\AntiVir Desktop\AVWEBGRD.EXE R2 AOL ACS;AOL Connectivity Service; C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe R2 CLCapSvc;CyberLink Background Capture Service (CBCS); c:\APPS\Powercinema\Kernel\TV\CLCapSvc.exe R2 CLSched;CyberLink Task Scheduler (CTS); c:\APPS\Powercinema\Kernel\TV\CLSched.exe R2 CyberLink Media Library Service;CyberLink Media Library Service; C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLServer.exe R2 EpsonBidirectionalService;EpsonBidirectionalService; C:\Program Files\Fichiers communs\EPSON\EBAPI\eEBSVC.exe R2 EPSONStatusAgent2;EPSON Printer Status Agent2; C:\Program Files\Fichiers communs\EPSON\EBAPI\SAgent2.exe R2 GenericHidService;Generic Service for HID Keyboard Input Collections; c:\APPS\HIDSERVICE\HIDSERVICE.exe R2 hpqddsvc;Service HP CUE DeviceDiscovery; C:\WINDOWS\system32\svchost.exe R2 HPSLPSVC;HP Network Devices Support; C:\WINDOWS\system32\svchost.exe R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe R2 LVPrcSrv;Process Monitor; c:\program files\fichiers communs\logitech\lvmvfm\LVPrcSrv.exe R2 Net Driver HPZ12;Net Driver HPZ12; C:\WINDOWS\System32\svchost.exe R2 PixVue;PixVue; C:\Program Files\PixVue.Com\PixVue\bin\Daemon.exe R2 Pml Driver HPZ12;Pml Driver HPZ12; C:\WINDOWS\System32\svchost.exe R2 RetroExpLauncher;Retrospect Express HD Launcher; C:\Program Files\Retrospect\Retrospect Express HD 2.5\retrorun.exe R2 vsmon;TrueVector Internet Monitor; C:\WINDOWS\system32\ZoneLabs\vsmon.exe R3 hpqcxs08;hpqcxs08; C:\WINDOWS\system32\svchost.exe S2 LVSrvLauncher;LVSrvLauncher; C:\Program Files\Fichiers communs\Logitech\SrvLnch\SrvLnch.exe S2 Planificateur LiveUpdate automatique;Planificateur LiveUpdate automatique; C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe S3 gusvc;Google Updater Service; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Fichiers communs\InstallShield\Driver\1150\Intel 32\IDriverT.exe S3 idsvc;Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe S3 MySqlInventime;MySqlInventime; c:\mysql\bin\mysqld-max-nt MySqlInventime S3 ose;Office Source Engine; C:\Program Files\Fichiers communs\Microsoft Shared\Source Engine\OSE.EXE S3 SwitchBoard;SwitchBoard; C:\Program Files\Fichiers communs\Adobe\SwitchBoard\SwitchBoard.exe S3 UPnPService;UPnPService; C:\Program Files\Fichiers communs\MAGIX Shared\UPnPService\UPnPService.exe S3 WMPNetworkSvc;Service Partage réseau du Lecteur Windows Media; C:\Program Files\Windows Media Player\WMPNetwk.exe S3 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe -----------------EOF-----------------

kmisol · Answer 6 · Posté le 06/02/2012 à 23:30:58

... Télécharge AdwCleaner (by Xplode) et enregistre-le sur le bureau. Puis, clique sur l'icône AdwCleaner qui est sur le bureau. Choisis l'option " Recherche ". Patiente le temps du scan ... Une fois le scan achevé, le rapport s'affiche. Poste (copie colle) celui-ci dans ta prochaine réponse.

Info45 · Answer 7 · Posté le 06/02/2012 à 23:46:57

------------------------- ci après le rapport ---------------------------- # AdwCleaner v1.408 - Rapport créé le 06/02/2012 à 23:34:35 # Mis à jour le 29/01/2012 par Xplode # Système d'exploitation : Microsoft Windows XP Service Pack 3 (32 bits) # Nom d'utilisateur : Shot - SN012345678912 (Administrateur) # Exécuté depuis : C:\Documents and Settings\Shot\Bureau\adwcleaner.exe # Option ***** ***** ***** ***** Dossier Présent : C:\Documents and Settings\All Users\Application Data\Viewpoint Dossier Présent : C:\Documents and Settings\Shot\Application Data\AskToolbar Dossier Présent : C:\Documents and Settings\Shot\Application Data\Mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384} Dossier Présent : C:\Documents and Settings\Shot\Local Settings\Application Data\AskToolbar Dossier Présent : C:\Documents and Settings\Shot\Local Settings\Application Data\Conduit Dossier Présent : C:\Program Files\Ask.com Dossier Présent : C:\Program Files\Conduit Dossier Présent : C:\WINDOWS\Installer\{86D4B82A-ABED-442A-BE86-96357B70F4FE} Dossier Présent : C:\Documents and Settings\Shot\Application Data\Mozilla\Firefox\Profiles\8lrhl7pf.default\ConduitCommon Dossier Présent : C:\Documents and Settings\Shot\Application Data\Mozilla\Firefox\Profiles\8lrhl7pf.default\extensions\toolbar@ask.com Fichier Présent : C:\WINDOWS\Tasks\Scheduled Update for Ask Toolbar.job Fichier Présent : C:\Documents and Settings\Shot\Application Data\Mozilla\Firefox\Profiles\8lrhl7pf.default\searchplugins\Askcom.xml Fichier Présent : C:\Documents and Settings\Shot\Application Data\Mozilla\Firefox\Profiles\8lrhl7pf.default\searchplugins\Conduit.xml ***** ***** Clé Présente : HKLM\SOFTWARE\Classes\Toolbar.CT2613520 Clé Présente : HKCU\Toolbar Clé Présente : HKCU\Software\Ask.com Clé Présente : HKCU\Software\AskToolbar Clé Présente : HKCU\Software\APN Clé Présente : HKCU\Software\Conduit Clé Présente : HKCU\Software\ConduitSearchScopes Clé Présente : HKCU\Software\AppDataLow\Software\Conduit Clé Présente : HKLM\SOFTWARE\AskToolbar Clé Présente : HKLM\SOFTWARE\APN Clé Présente : HKLM\SOFTWARE\Conduit Clé Présente : HKLM\SOFTWARE\ItsLabel Clé Présente : HKLM\SOFTWARE\MetaStream Clé Présente : HKLM\SOFTWARE\Orbit\OpenCandy Clé Présente : HKLM\SOFTWARE\Classes\GenericAskToolbar.ToolbarWnd Clé Présente : HKLM\SOFTWARE\Classes\GenericAskToolbar.ToolbarWnd.1 Clé Présente : HKLM\SOFTWARE\Classes\AppID\GenericAskToolbar.DLL Clé Présente : HKLM\SOFTWARE\Classes\AppID\SoftwareUpdate.exe Clé Présente : HKLM\SOFTWARE\Classes\AppID\{9B0CB95C-933A-4B8C-B6D4-EDCD19A43874} Clé Présente : HKLM\SOFTWARE\Classes\CLSID\{3c471948-f874-49f5-b338-4f214a2ee0b1} Clé Présente : HKLM\SOFTWARE\Classes\CLSID\{00000000-6E41-4FD3-8538-502F5495E5FC} Clé Présente : HKLM\SOFTWARE\Classes\CLSID\{D4027C7F-154A-4066-A1AD-4243D8127440} Clé Présente : HKLM\SOFTWARE\Classes\Installer\Products\A28B4D68DEBAA244EB686953B7074FEF Clé Présente : HKLM\SOFTWARE\Classes\Installer\Features\A28B4D68DEBAA244EB686953B7074FEF Clé Présente : HKLM\SOFTWARE\Microsoft\RFC1156Agent Clé Présente : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\A28B4D68DEBAA244EB686953B7074FEF Clé Présente : HKLM\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\2796BAE63F1801E277261BA0D77770028F20EEE4 Clé Présente : HKLM\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\DE28F4A4FFE5B92FA3C503D1A349A7F9962A8212 Clé Présente : HKLM\SOFTWARE\Classes\Interface\{6C434537-053E-486D-B62A-160059D9D456} Clé Présente : HKLM\SOFTWARE\Classes\Interface\{91CF619A-4686-4CA4-9232-3B2E6B63AA92} Clé Présente : HKLM\SOFTWARE\Classes\Interface\{AC71B60E-94C9-4EDE-BA46-E146747BB67E} Clé Présente : HKLM\SOFTWARE\Classes\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56} Clé Présente : HKLM\SOFTWARE\Microsoft\Active Setup\Installed Components\{03F998B2-0E00-11D3-A498-00104B6EB52E} Clé Présente : HKLM\SOFTWARE\Microsoft\Active Setup\Installed Components\{1B00725B-C455-4DE6-BFB6-AD540AD427CD} Clé Présente : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b} Clé Présente : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D4027C7F-154A-4066-A1AD-4243D8127440} Clé Présente : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{D4027C7F-154A-4066-A1AD-4243D8127440} Clé Présente : HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A5AA24EA-11B8-4113-95AE-9ED71DEAF12A} Clé Présente : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A5AA24EA-11B8-4113-95AE-9ED71DEAF12A} Clé Présente : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440} Clé Présente : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{86D4B82A-ABED-442A-BE86-96357B70F4FE} Clé Présente : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\setup.exe Clé Présente : HKLM\SOFTWARE\MozillaPlugins\@viewpoint.com/VMP Valeur Présente : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks Valeur Présente : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser Valeur Présente : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar Valeur Présente : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run ***** ***** -\\ Internet Explorer v8.0.6001.18702 = hxxp://search.conduit.com?SearchSource=10&ctid=CT2613520 -\\ Mozilla Firefox v3.6.8 (fr) Profil : 8lrhl7pf.default Fichier : C:\Documents and Settings\Shot\Application Data\Mozilla\Firefox\Profiles\8lrhl7pf.default\prefs.js Présente : user_pref("CT2613520..clientLogIsEnabled", true); Présente : user_pref("CT2613520..clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.as Présente : user_pref("CT2613520..uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/Re Présente : user_pref("CT2613520.ALLOW_SHOWING_HIDDEN_TOOLBAR", false); Présente : user_pref("CT2613520.AboutPrivacyUrl", "hxxp://www.conduit.com/privacy/Default.aspx"); Présente : user_pref("CT2613520.CTID", "ct2613520"); Présente : user_pref("CT2613520.CurrentServerDate", "4-2-2012"); Présente : user_pref("CT2613520.DialogsAlignMode", "LTR"); Présente : user_pref("CT2613520.DialogsGetterLastCheckTime", "Sat Feb 04 2012 13:35:58 GMT+0100"); Présente : user_pref("CT2613520.DownloadReferralCookieData", ""); Présente : user_pref("CT2613520.EMailNotifierPollDate", "Sat Feb 04 2012 19:31:23 GMT+0100"); Présente : user_pref("CT2613520.FirstServerDate", "4-12-2010"); Présente : user_pref("CT2613520.FirstTime", true); Présente : user_pref("CT2613520.FirstTimeFF3", true); Présente : user_pref("CT2613520.FirstTimeSettingsDone", true); Présente : user_pref("CT2613520.FixPageNotFoundErrors", true); Présente : user_pref("CT2613520.GroupingServerCheckInterval", 1440); Présente : user_pref("CT2613520.GroupingServiceUrl", "hxxp://grouping.services.conduit.com/"); Présente : user_pref("CT2613520.HasUserGlobalKeys", true); Présente : user_pref("CT2613520.Initialize", true); Présente : user_pref("CT2613520.InitializeCommonPrefs", true); Présente : user_pref("CT2613520.InstallationAndCookieDataSentCount", 3); Présente : user_pref("CT2613520.InstallationType", "UnknownIntegration"); Présente : user_pref("CT2613520.InstalledDate", "Sat Dec 04 2010 11:44:19 GMT+0100"); Présente : user_pref("CT2613520.IsAlertDBUpdated", true); Présente : user_pref("CT2613520.IsGrouping", false); Présente : user_pref("CT2613520.IsMulticommunity", false); Présente : user_pref("CT2613520.IsOpenThankYouPage", false); Présente : user_pref("CT2613520.IsOpenUninstallPage", true); Présente : user_pref("CT2613520.LanguagePackLastCheckTime", "Sat Dec 04 2010 11:44:44 GMT+0100"); Présente : user_pref("CT2613520.LanguagePackReloadIntervalMM", 1440); Présente : user_pref("CT2613520.LanguagePackServiceUrl", "hxxp://translation.users.conduit.com/Translation.ashx Présente : user_pref("CT2613520.LastLogin_2.7.1.3", "Sat Dec 04 2010 11:44:44 GMT+0100"); Présente : user_pref("CT2613520.LastLogin_3.3.3.2", "Wed Jun 15 2011 23:24:35 GMT+0200"); Présente : user_pref("CT2613520.LastLogin_3.5.0.12", "Tue Aug 16 2011 15:02:57 GMT+0200"); Présente : user_pref("CT2613520.LastLogin_3.6.0.10", "Sun Sep 18 2011 18:15:15 GMT+0200"); Présente : user_pref("CT2613520.LastLogin_3.8.0.8", "Wed Nov 30 2011 14:45:11 GMT+0100"); Présente : user_pref("CT2613520.LastLogin_3.9.0.3", "Sat Feb 04 2012 18:05:11 GMT+0100"); Présente : user_pref("CT2613520.LatestVersion", "3.9.0.3"); Présente : user_pref("CT2613520.Locale", "fr-fr"); Présente : user_pref("CT2613520.LoginCache", 4); Présente : user_pref("CT2613520.MCDetectTooltipHeight", "83"); Présente : user_pref("CT2613520.MCDetectTooltipUrl", "hxxp://@EB_INSTALL_LINK@/rank/tooltip/?version=1"); Présente : user_pref("CT2613520.MCDetectTooltipWidth", "295"); Présente : user_pref("CT2613520.MyStuffEnabledAtInstallation", false); Présente : user_pref("CT2613520.RadioIsPodcast", false); Présente : user_pref("CT2613520.RadioMediaID", "9962"); Présente : user_pref("CT2613520.RadioMediaType", "Media Player"); Présente : user_pref("CT2613520.RadioMenuSelectedID", "EBRadioMenu_CT26135209962"); Présente : user_pref("CT2613520.RadioShrinkedFromSetup", false); Présente : user_pref("CT2613520.RadioStationName", "California%20Rock"); Présente : user_pref("CT2613520.RadioStationURL", "hxxp://feedlive.net/california.asx"); Présente : user_pref("CT2613520.SearchEngine", "Recherche||hxxp://search.conduit.com/Results.aspx?q=UCM_SEARCH_ Présente : user_pref("CT2613520.SearchFromAddressBarIsInit", true); Présente : user_pref("CT2613520.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT261 Présente : user_pref("CT2613520.SearchInNewTabEnabled", true); Présente : user_pref("CT2613520.SearchInNewTabIntervalMM", 1440); Présente : user_pref("CT2613520.SearchInNewTabServiceUrl", "hxxp://newtab.conduit-hosting.com/newtab/?ctid=EB_T Présente : user_pref("CT2613520.SearchInNewTabUsageUrl", "hxxp://usage.hosting.toolbar.conduit-services.com/usa Présente : user_pref("CT2613520.ServiceMapLastCheckTime", "Sat Feb 04 2012 19:31:19 GMT+0100"); Présente : user_pref("CT2613520.SettingsCheckIntervalMin", 120); Présente : user_pref("CT2613520.SettingsLastCheckTime", "Sat Dec 04 2010 11:44:15 GMT+0100"); Présente : user_pref("CT2613520.SettingsLastUpdate", "1291277758"); Présente : user_pref("CT2613520.ThirdPartyComponentsInterval", 504); Présente : user_pref("CT2613520.ThirdPartyComponentsLastCheck", "Sat Dec 04 2010 11:44:12 GMT+0100"); Présente : user_pref("CT2613520.ThirdPartyComponentsLastUpdate", "1255348267"); Présente : user_pref("CT2613520.ToolbarShrinkedFromSetup", false); Présente : user_pref("CT2613520.TrusteLinkUrl", "hxxp://trust.conduit.com/CT2613520"); Présente : user_pref("CT2613520.TrustedApiDomains", "conduit.com,conduit-hosting.com,conduit-services.com,clien Présente : user_pref("CT2613520.UserID", "UN85374177174184363"); Présente : user_pref("CT2613520.WeatherNetwork", ""); Présente : user_pref("CT2613520.WeatherPollDate", "Sat Feb 04 2012 19:10:49 GMT+0100"); Présente : user_pref("CT2613520.WeatherUnit", "C"); Présente : user_pref("CT2613520.alertChannelId", "1006317"); Présente : user_pref("CT2613520.clientLogIsEnabled", false); Présente : user_pref("CT2613520.clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.asm Présente : user_pref("CT2613520.components.1000082", true); Présente : user_pref("CT2613520.components.1000234", true); Présente : user_pref("CT2613520.ct2613520.AppTrackingLastCheckTime", "Sun Nov 20 2011 23:19:17 GMT+0100"); Présente : user_pref("CT2613520.ct2613520.DialogsAlignMode", "LTR"); Présente : user_pref("CT2613520.ct2613520.FirstTimeSettingsDone", true); Présente : user_pref("CT2613520.ct2613520.InvalidateCache", false); Présente : user_pref("CT2613520.ct2613520.LanguagePackLastCheckTime", "Sat Feb 04 2012 13:35:58 GMT+0100"); Présente : user_pref("CT2613520.ct2613520.Locale", "fr-fr"); Présente : user_pref("CT2613520.ct2613520.RadioLastCheckTime", "Sat Feb 04 2012 13:35:44 GMT+0100"); Présente : user_pref("CT2613520.ct2613520.RadioLastUpdateIPServer", "3"); Présente : user_pref("CT2613520.ct2613520.RadioLastUpdateServer", "0"); Présente : user_pref("CT2613520.ct2613520.SearchEngine", "Recherche||hxxp://search.conduit.com/Results.aspx?q=U Présente : user_pref("CT2613520.ct2613520.SearchInNewTabLastCheckTime", "Sat Feb 04 2012 13:35:43 GMT+0100"); Présente : user_pref("CT2613520.ct2613520.SettingsCheckIntervalMin", 120); Présente : user_pref("CT2613520.ct2613520.SettingsLastCheckTime", "Sat Feb 04 2012 18:05:01 GMT+0100"); Présente : user_pref("CT2613520.ct2613520.SettingsLastUpdate", "1321973221"); Présente : user_pref("CT2613520.ct2613520.ThirdPartyComponentsLastCheck", "Sun Jan 22 2012 21:57:00 GMT+0100"); Présente : user_pref("CT2613520.ct2613520.ThirdPartyComponentsLastUpdate", "1255348267"); Présente : user_pref("CT2613520.ct2613520.globalFirstTimeInfoLastCheckTime", "Sat Feb 04 2012 13:35:58 GMT+0100 Présente : user_pref("CT2613520.ct2613520.toolbarAppMetaDataLastCheckTime", "Sat Feb 04 2012 13:35:58 GMT+0100" Présente : user_pref("CT2613520.ct2613520.toolbarContextMenuLastCheckTime", "Sun Jan 22 2012 21:57:09 GMT+0100" Présente : user_pref("CT2613520.generalConfigFromLogin", "{\"ApiMaxAlerts\":\"12\",\"SocialDomains\":\"social.c Présente : user_pref("CT2613520.homepageProtectorEnableByLogin", true); Présente : user_pref("CT2613520.initDone", true); Présente : user_pref("CT2613520.isAppTrackingManagerOn", true); Présente : user_pref("CT2613520.isFirstRadioInstallation", false); Présente : user_pref("CT2613520.myStuffEnabled", true); Présente : user_pref("CT2613520.myStuffPublihserMinWidth", 400); Présente : user_pref("CT2613520.myStuffSearchUrl", "hxxp://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOr Présente : user_pref("CT2613520.myStuffServiceIntervalMM", 1440); Présente : user_pref("CT2613520.myStuffServiceUrl", "hxxp://mystuff.conduit-services.com/MyStuffService.ashx?Co Présente : user_pref("CT2613520.oldAppsList", "129171058074716794,129171058074873045,111,129171058075029296,129 Présente : user_pref("CT2613520.revertSettingsEnabled", true); Présente : user_pref("CT2613520.searchProtectorDialogDelayInSec", 10); Présente : user_pref("CT2613520.searchProtectorEnableByLogin", true); Présente : user_pref("CT2613520.testingCtid", ""); Présente : user_pref("CT2613520.uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/Reg Présente : user_pref("CT2613520.usagesFlag", 2); Présente : user_pref("CommunityToolbar.ETag.hxxp://Settings.toolbar.search.conduit.com/root/ct2613520/CT2613520 Présente : user_pref("CommunityToolbar.ETag.hxxp://appsmetadata.toolbar.conduit-services.com/?ctid=ct2613520", Présente : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=GottenApps&lo Présente : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=OtherApps&loc Présente : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=SharedApps&lo Présente : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=Toolbar&local Présente : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.alert.conduit-services.com/alert/dlg.pkg", "\ Présente : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.engine.conduit-services.com/DLG.pkg?ver=3.3.3 Présente : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.3. Présente : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.5. Présente : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.6. Présente : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.8. Présente : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.9. Présente : user_pref("CommunityToolbar.ETag.hxxp://servicemap.conduit-services.com/Toolbar/?ownerId=CT2613520", Présente : user_pref("CommunityToolbar.ETag.hxxp://settings.engine.conduit-services.com/?browser=FF&lut=0", "63 Présente : user_pref("CommunityToolbar.ETag.hxxp://settings.engine.conduit-services.com/?browser=FF&lut=3/13/20 Présente : user_pref("CommunityToolbar.ETag.hxxp://settings.toolbar.conduit-services.com/?ctid=ct2613520&octid= Présente : user_pref("CommunityToolbar.ETag.hxxp://settings.toolbar.search.conduit.com/root/ct2613520/CT2613520 Présente : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/20/261/CT2613520/Images/6340849620311100 Présente : user_pref("CommunityToolbar.ETag.hxxp://translation.toolbar.conduit-services.com/?locale=fr-fr", "\" Présente : user_pref("CommunityToolbar.EngineOwner", ""); Présente : user_pref("CommunityToolbar.EngineOwnerGuid", "{d7f26d0e-9801-45c3-a091-8a65e4ed73b5}"); Présente : user_pref("CommunityToolbar.EngineOwnerToolbarId", "protection_zonealarm"); Présente : user_pref("CommunityToolbar.IsEngineShown", true); Présente : user_pref("CommunityToolbar.IsMyStuffImportedToEngine", true); Présente : user_pref("CommunityToolbar.LatestLibsPath", "file:///C:\\Documents and Settings\\Shot\\Application Présente : user_pref("CommunityToolbar.LatestToolbarVersionInstalled", "3.9.0.3"); Présente : user_pref("CommunityToolbar.OriginalEngineOwner", "CT2613520"); Présente : user_pref("CommunityToolbar.OriginalEngineOwnerGuid", "{d7f26d0e-9801-45c3-a091-8a65e4ed73b5}"); Présente : user_pref("CommunityToolbar.OriginalEngineOwnerToolbarId", "protection_zonealarm"); Présente : user_pref("CommunityToolbar.SearchFromAddressBarSavedUrl", "chrome://browser-region/locale/region.pr Présente : user_pref("CommunityToolbar.ToolbarsList", "CT2613520"); Présente : user_pref("CommunityToolbar.ToolbarsList2", "CT2613520"); Présente : user_pref("CommunityToolbar.alert.alertDialogsGetterLastCheckTime", "Sun Jun 12 2011 18:04:52 GMT+02 Présente : user_pref("CommunityToolbar.alert.clientsServerUrl", "hxxp://alert.client.conduit.com"); Présente : user_pref("CommunityToolbar.alert.locale", "en"); Présente : user_pref("CommunityToolbar.alert.loginIntervalMin", 1440); Présente : user_pref("CommunityToolbar.alert.loginLastCheckTime", "Wed Jun 15 2011 23:24:24 GMT+0200"); Présente : user_pref("CommunityToolbar.alert.loginLastUpdateTime", "1305622559"); Présente : user_pref("CommunityToolbar.alert.messageShowTimeSec", 20); Présente : user_pref("CommunityToolbar.alert.servicesServerUrl", "hxxp://alert.services.conduit.com"); Présente : user_pref("CommunityToolbar.alert.showTrayIcon", false); Présente : user_pref("CommunityToolbar.alert.userCloseIntervalMin", 300); Présente : user_pref("CommunityToolbar.alert.userId", "b9378b7a-b189-4b06-9591-2f352f8be56a"); Présente : user_pref("CommunityToolbar.facebook.settingsLastCheckTime", "Sat Feb 04 2012 13:35:43 GMT+0100"); Présente : user_pref("CommunityToolbar.globalUserId", "910c11df-8759-4e70-9171-5688880c25e1"); Présente : user_pref("CommunityToolbar.isAlertUrlAddedToFeedItemTable", true); Présente : user_pref("CommunityToolbar.isClickActionAddedToFeedItemTable", true); Présente : user_pref("CommunityToolbar.keywordURLSelectedCTID", "CT2613520"); Présente : user_pref("CommunityToolbar.killedEngine", true); Présente : user_pref("CommunityToolbar.notifications.alertDialogsGetterLastCheckTime", "Sat Feb 04 2012 13:35:4 Présente : user_pref("CommunityToolbar.notifications.clientsServerUrl", "hxxp://alert.client.conduit.com"); Présente : user_pref("CommunityToolbar.notifications.locale", "en"); Présente : user_pref("CommunityToolbar.notifications.loginIntervalMin", 1440); Présente : user_pref("CommunityToolbar.notifications.loginLastCheckTime", "Sat Feb 04 2012 13:35:37 GMT+0100"); Présente : user_pref("CommunityToolbar.notifications.loginLastUpdateTime", "1313487611"); Présente : user_pref("CommunityToolbar.notifications.messageShowTimeSec", 20); Présente : user_pref("CommunityToolbar.notifications.servicesServerUrl", "hxxp://alert.services.conduit.com"); Présente : user_pref("CommunityToolbar.notifications.showTrayIcon", false); Présente : user_pref("CommunityToolbar.notifications.userCloseIntervalMin", 300); Présente : user_pref("CommunityToolbar.notifications.userId", "55152212-b1a7-4ea4-92b8-4e1493efb259"); Présente : user_pref("CommunityToolbar.undefined", ""); Présente : user_pref("browser.search.defaultengine", "Ask.com"); Présente : user_pref("browser.search.defaultenginename", "Ask.com"); Présente : user_pref("browser.search.defaultthis.engineName", "Protection ZoneAlarm Customized Web Search"); Présente : user_pref("browser.search.defaulturl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2613520&Sea Présente : user_pref("browser.search.order.1", "Ask.com"); Présente : user_pref("browser.search.selectedEngine", "Ask.com"); Présente : user_pref("extensions.asktb.AviraIDW-TS", "1321827558696"); Présente : user_pref("extensions.asktb.AviraIDW-XML", "<?xml version=\"1.0\" encoding=\"UTF-8\"?>\r\n<button xm Présente : user_pref("extensions.asktb.InstallDir", "C:\\Program Files\\Ask.com\\"); Présente : user_pref("extensions.asktb.cbid", "JM"); Présente : user_pref("extensions.asktb.config-updated", false); Présente : user_pref("extensions.asktb.crumb", "2011.09.05+23.31.33-toolbar013iad-FR-T3JsZWFucyxGcmFuY2U%3D"); Présente : user_pref("extensions.asktb.default-channel-url-mask", "hxxp://fr.ask.com/web?q={query}&qsrc={qsrc}& Présente : user_pref("extensions.asktb.dtid", "YYYYYYYYFR"); Présente : user_pref("extensions.asktb.ff-original-keyword-url", "hxxp://search.conduit.com/ResultsExt.aspx?cti Présente : user_pref("extensions.asktb.first-launch", true); Présente : user_pref("extensions.asktb.first-restart-after-config-update", true); Présente : user_pref("extensions.asktb.fresh-install", false); Présente : user_pref("extensions.asktb.guid", "ad83e039-934e-487a-9d47-978313027abd"); Présente : user_pref("extensions.asktb.hxxp-header-whitelist-hosts", " Présente : user_pref("extensions.asktb.if", "first"); Présente : user_pref("extensions.asktb.l", "dis"); Présente : user_pref("extensions.asktb.last-config-req", "1328566610163"); Présente : user_pref("extensions.asktb.last-v", "3.13.2.100010"); Présente : user_pref("extensions.asktb.locale", "fr_FR"); Présente : user_pref("extensions.asktb.location", "Orleans,France"); Présente : user_pref("extensions.asktb.notification-shown", true); Présente : user_pref("extensions.asktb.o", "100000080"); Présente : user_pref("extensions.asktb.overlay-reloaded-using-restart", true); Présente : user_pref("extensions.asktb.qsrc", "2871"); Présente : user_pref("extensions.asktb.r", "2"); Présente : user_pref("extensions.asktb.sa", "YES"); Présente : user_pref("extensions.asktb.saguid", "C05D03B6-DF8C-4D89-B2B8-695894DDB2B7"); Présente : user_pref("extensions.asktb.search-suggestions-enabled", true); Présente : user_pref("extensions.asktb.silent-upgrade", true); Présente : user_pref("extensions.asktb.silent-upgrade-from-pre-newtabs-build", false); Présente : user_pref("extensions.asktb.themeid", ""); Présente : user_pref("extensions.asktb.to", ""); Présente : user_pref("extensions.asktb.v", "3.14.1.100010"); Présente : user_pref("extensions.enabledAddons", "{d7f26d0e-9801-45c3-a091-8a65e4ed73b5}:3.9.0.3,toolbar@ask.co Présente : user_pref("keyword.URL", "hxxp://websearch.ask.com/redirect?client=ff&src=kw&tb=AVR-W1&o=100000080&l Profil : oe9kawho.default Fichier : C:\Documents and Settings\Shot\Application Data\Mozilla\Firefox\Profiles\oe9kawho.default\prefs.js Le fichier ne contient aucune entrée illégitime. ************************* AdwCleaner .txt - - ########## EOF - C:\AdwCleaner .txt - ##########

kmisol · Answer 8 · Posté le 07/02/2012 à 00:01:19

... Fais ce qui suit, dans l'ordre (merci de respecter cet ordre) : 1 / Relance AdwCleaner et choisis l’option « Suppression ». Poste le rapport. ----- 2 / Télécharge AD-R (de Cyrildu17 / C_XX) sur ton Bureau. !! Déconnecte-toi du net et ferme toutes applications en cours !! Double-clique sur le programme d'installation ; laisse-le s’installer par défaut (C:\Program files). Double-clique sur l'icône AD-Remover située sur ton Bureau. Au menu principal, choisis l'option « Nettoyer ». L’outil débute le nettoyage … Laisse-le travailler ! Le scan achevé, une fenêtre va s’afficher. Poste (copie-colle) le rapport qui apparaît à la fin. (tu trouveras aussi le rapport sous C:\ Ad-report(date).log ) Note : "Process.exe", une composante de l'outil peut être détecté par certains antivirus comme une infection ; donc, ne pas en tenir compte : il s'agit ----- Une fois cela achevé, tu pourras lancer Malwarebytes ...

Info45 · Answer 9 · Posté le 07/02/2012 à 00:19:17

----------------------- Ci joint la partie 1 à noter l'outil m'a déactiver la protection web de mon antivirus Avira Antivir V12.0.0.190 ------------ # AdwCleaner v1.408 - Rapport créé le 07/02/2012 à 00:02:59 # Mis à jour le 29/01/2012 par Xplode # Système d'exploitation : Microsoft Windows XP Service Pack 3 (32 bits) # Nom d'utilisateur : Shot - SN012345678912 (Administrateur) # Exécuté depuis : C:\Documents and Settings\Shot\Bureau\adwcleaner.exe # Option ***** ***** ***** ***** Dossier Supprimé : C:\Documents and Settings\All Users\Application Data\Viewpoint Dossier Supprimé : C:\Documents and Settings\Shot\Application Data\AskToolbar Dossier Supprimé : C:\Documents and Settings\Shot\Application Data\Mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384} Dossier Supprimé : C:\Documents and Settings\Shot\Local Settings\Application Data\AskToolbar Dossier Supprimé : C:\Documents and Settings\Shot\Local Settings\Application Data\Conduit Dossier Supprimé : C:\Program Files\Ask.com Dossier Supprimé : C:\Program Files\Conduit Dossier Supprimé : C:\WINDOWS\Installer\{86D4B82A-ABED-442A-BE86-96357B70F4FE} Dossier Supprimé : C:\Documents and Settings\Shot\Application Data\Mozilla\Firefox\Profiles\8lrhl7pf.default\ConduitCommon Dossier Supprimé : C:\Documents and Settings\Shot\Application Data\Mozilla\Firefox\Profiles\8lrhl7pf.default\extensions\toolbar@ask.com Fichier Supprimé : C:\WINDOWS\Tasks\Scheduled Update for Ask Toolbar.job Fichier Supprimé : C:\Documents and Settings\Shot\Application Data\Mozilla\Firefox\Profiles\8lrhl7pf.default\searchplugins\Askcom.xml Fichier Supprimé : C:\Documents and Settings\Shot\Application Data\Mozilla\Firefox\Profiles\8lrhl7pf.default\searchplugins\Conduit.xml ***** ***** Clé Supprimée : HKLM\SOFTWARE\Classes\Toolbar.CT2613520 Clé Supprimée : HKCU\Toolbar Clé Supprimée : HKCU\Software\Ask.com Clé Supprimée : HKCU\Software\AskToolbar Clé Supprimée : HKCU\Software\APN Clé Supprimée : HKCU\Software\Conduit Clé Supprimée : HKCU\Software\ConduitSearchScopes Clé Supprimée : HKCU\Software\AppDataLow\Software\Conduit Clé Supprimée : HKLM\SOFTWARE\AskToolbar Clé Supprimée : HKLM\SOFTWARE\APN Clé Supprimée : HKLM\SOFTWARE\Conduit Clé Supprimée : HKLM\SOFTWARE\ItsLabel Clé Supprimée : HKLM\SOFTWARE\MetaStream Clé Supprimée : HKLM\SOFTWARE\Orbit\OpenCandy Clé Supprimée : HKLM\SOFTWARE\Classes\GenericAskToolbar.ToolbarWnd Clé Supprimée : HKLM\SOFTWARE\Classes\GenericAskToolbar.ToolbarWnd.1 Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\GenericAskToolbar.DLL Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\SoftwareUpdate.exe Clé Supprimée : HKLM\SOFTWARE\Classes\AppID\{9B0CB95C-933A-4B8C-B6D4-EDCD19A43874} Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{3c471948-f874-49f5-b338-4f214a2ee0b1} Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{00000000-6E41-4FD3-8538-502F5495E5FC} Clé Supprimée : HKLM\SOFTWARE\Classes\CLSID\{D4027C7F-154A-4066-A1AD-4243D8127440} Clé Supprimée : HKLM\SOFTWARE\Classes\Installer\Products\A28B4D68DEBAA244EB686953B7074FEF Clé Supprimée : HKLM\SOFTWARE\Classes\Installer\Features\A28B4D68DEBAA244EB686953B7074FEF Clé Supprimée : HKLM\SOFTWARE\Microsoft\RFC1156Agent Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\A28B4D68DEBAA244EB686953B7074FEF Clé Supprimée : HKLM\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\2796BAE63F1801E277261BA0D77770028F20EEE4 Clé Supprimée : HKLM\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\DE28F4A4FFE5B92FA3C503D1A349A7F9962A8212 Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{6C434537-053E-486D-B62A-160059D9D456} Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{91CF619A-4686-4CA4-9232-3B2E6B63AA92} Clé Supprimée : HKLM\SOFTWARE\Classes\Interface\{AC71B60E-94C9-4EDE-BA46-E146747BB67E} Clé Supprimée : HKLM\SOFTWARE\Classes\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56} Clé Supprimée : HKLM\SOFTWARE\Microsoft\Active Setup\Installed Components\{03F998B2-0E00-11D3-A498-00104B6EB52E} Clé Supprimée : HKLM\SOFTWARE\Microsoft\Active Setup\Installed Components\{1B00725B-C455-4DE6-BFB6-AD540AD427CD} Clé Supprimée : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b} Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D4027C7F-154A-4066-A1AD-4243D8127440} Clé Supprimée : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{D4027C7F-154A-4066-A1AD-4243D8127440} Clé Supprimée : HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A5AA24EA-11B8-4113-95AE-9ED71DEAF12A} Clé Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A5AA24EA-11B8-4113-95AE-9ED71DEAF12A} Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440} Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{86D4B82A-ABED-442A-BE86-96357B70F4FE} Clé Supprimée : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\setup.exe Clé Supprimée : HKLM\SOFTWARE\MozillaPlugins\@viewpoint.com/VMP Valeur Supprimée : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks Valeur Supprimée : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser Valeur Supprimée : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar Valeur Supprimée : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run ***** ***** -\\ Internet Explorer v8.0.6001.18702 Remplacé : = hxxp://search.conduit.com?SearchSource=10&ctid=CT2613520 --> hxxp://www.google.fr -\\ Mozilla Firefox v3.6.8 (fr) Profil : 8lrhl7pf.default Fichier : C:\Documents and Settings\Shot\Application Data\Mozilla\Firefox\Profiles\8lrhl7pf.default\prefs.js Supprimée : user_pref("CT2613520..clientLogIsEnabled", true); Supprimée : user_pref("CT2613520..clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.as Supprimée : user_pref("CT2613520..uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/Re Supprimée : user_pref("CT2613520.ALLOW_SHOWING_HIDDEN_TOOLBAR", false); Supprimée : user_pref("CT2613520.AboutPrivacyUrl", "hxxp://www.conduit.com/privacy/Default.aspx"); Supprimée : user_pref("CT2613520.CTID", "ct2613520"); Supprimée : user_pref("CT2613520.CurrentServerDate", "4-2-2012"); Supprimée : user_pref("CT2613520.DialogsAlignMode", "LTR"); Supprimée : user_pref("CT2613520.DialogsGetterLastCheckTime", "Sat Feb 04 2012 13:35:58 GMT+0100"); Supprimée : user_pref("CT2613520.DownloadReferralCookieData", ""); Supprimée : user_pref("CT2613520.EMailNotifierPollDate", "Sat Feb 04 2012 19:31:23 GMT+0100"); Supprimée : user_pref("CT2613520.FirstServerDate", "4-12-2010"); Supprimée : user_pref("CT2613520.FirstTime", true); Supprimée : user_pref("CT2613520.FirstTimeFF3", true); Supprimée : user_pref("CT2613520.FirstTimeSettingsDone", true); Supprimée : user_pref("CT2613520.FixPageNotFoundErrors", true); Supprimée : user_pref("CT2613520.GroupingServerCheckInterval", 1440); Supprimée : user_pref("CT2613520.GroupingServiceUrl", "hxxp://grouping.services.conduit.com/"); Supprimée : user_pref("CT2613520.HasUserGlobalKeys", true); Supprimée : user_pref("CT2613520.Initialize", true); Supprimée : user_pref("CT2613520.InitializeCommonPrefs", true); Supprimée : user_pref("CT2613520.InstallationAndCookieDataSentCount", 3); Supprimée : user_pref("CT2613520.InstallationType", "UnknownIntegration"); Supprimée : user_pref("CT2613520.InstalledDate", "Sat Dec 04 2010 11:44:19 GMT+0100"); Supprimée : user_pref("CT2613520.IsAlertDBUpdated", true); Supprimée : user_pref("CT2613520.IsGrouping", false); Supprimée : user_pref("CT2613520.IsMulticommunity", false); Supprimée : user_pref("CT2613520.IsOpenThankYouPage", false); Supprimée : user_pref("CT2613520.IsOpenUninstallPage", true); Supprimée : user_pref("CT2613520.LanguagePackLastCheckTime", "Sat Dec 04 2010 11:44:44 GMT+0100"); Supprimée : user_pref("CT2613520.LanguagePackReloadIntervalMM", 1440); Supprimée : user_pref("CT2613520.LanguagePackServiceUrl", "hxxp://translation.users.conduit.com/Translation.ashx Supprimée : user_pref("CT2613520.LastLogin_2.7.1.3", "Sat Dec 04 2010 11:44:44 GMT+0100"); Supprimée : user_pref("CT2613520.LastLogin_3.3.3.2", "Wed Jun 15 2011 23:24:35 GMT+0200"); Supprimée : user_pref("CT2613520.LastLogin_3.5.0.12", "Tue Aug 16 2011 15:02:57 GMT+0200"); Supprimée : user_pref("CT2613520.LastLogin_3.6.0.10", "Sun Sep 18 2011 18:15:15 GMT+0200"); Supprimée : user_pref("CT2613520.LastLogin_3.8.0.8", "Wed Nov 30 2011 14:45:11 GMT+0100"); Supprimée : user_pref("CT2613520.LastLogin_3.9.0.3", "Sat Feb 04 2012 18:05:11 GMT+0100"); Supprimée : user_pref("CT2613520.LatestVersion", "3.9.0.3"); Supprimée : user_pref("CT2613520.Locale", "fr-fr"); Supprimée : user_pref("CT2613520.LoginCache", 4); Supprimée : user_pref("CT2613520.MCDetectTooltipHeight", "83"); Supprimée : user_pref("CT2613520.MCDetectTooltipUrl", "hxxp://@EB_INSTALL_LINK@/rank/tooltip/?version=1"); Supprimée : user_pref("CT2613520.MCDetectTooltipWidth", "295"); Supprimée : user_pref("CT2613520.MyStuffEnabledAtInstallation", false); Supprimée : user_pref("CT2613520.RadioIsPodcast", false); Supprimée : user_pref("CT2613520.RadioMediaID", "9962"); Supprimée : user_pref("CT2613520.RadioMediaType", "Media Player"); Supprimée : user_pref("CT2613520.RadioMenuSelectedID", "EBRadioMenu_CT26135209962"); Supprimée : user_pref("CT2613520.RadioShrinkedFromSetup", false); Supprimée : user_pref("CT2613520.RadioStationName", "California%20Rock"); Supprimée : user_pref("CT2613520.RadioStationURL", "hxxp://feedlive.net/california.asx"); Supprimée : user_pref("CT2613520.SearchEngine", "Recherche||hxxp://search.conduit.com/Results.aspx?q=UCM_SEARCH_ Supprimée : user_pref("CT2613520.SearchFromAddressBarIsInit", true); Supprimée : user_pref("CT2613520.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT261 Supprimée : user_pref("CT2613520.SearchInNewTabEnabled", true); Supprimée : user_pref("CT2613520.SearchInNewTabIntervalMM", 1440); Supprimée : user_pref("CT2613520.SearchInNewTabServiceUrl", "hxxp://newtab.conduit-hosting.com/newtab/?ctid=EB_T Supprimée : user_pref("CT2613520.SearchInNewTabUsageUrl", "hxxp://usage.hosting.toolbar.conduit-services.com/usa Supprimée : user_pref("CT2613520.ServiceMapLastCheckTime", "Sat Feb 04 2012 19:31:19 GMT+0100"); Supprimée : user_pref("CT2613520.SettingsCheckIntervalMin", 120); Supprimée : user_pref("CT2613520.SettingsLastCheckTime", "Sat Dec 04 2010 11:44:15 GMT+0100"); Supprimée : user_pref("CT2613520.SettingsLastUpdate", "1291277758"); Supprimée : user_pref("CT2613520.ThirdPartyComponentsInterval", 504); Supprimée : user_pref("CT2613520.ThirdPartyComponentsLastCheck", "Sat Dec 04 2010 11:44:12 GMT+0100"); Supprimée : user_pref("CT2613520.ThirdPartyComponentsLastUpdate", "1255348267"); Supprimée : user_pref("CT2613520.ToolbarShrinkedFromSetup", false); Supprimée : user_pref("CT2613520.TrusteLinkUrl", "hxxp://trust.conduit.com/CT2613520"); Supprimée : user_pref("CT2613520.TrustedApiDomains", "conduit.com,conduit-hosting.com,conduit-services.com,clien Supprimée : user_pref("CT2613520.UserID", "UN85374177174184363"); Supprimée : user_pref("CT2613520.WeatherNetwork", ""); Supprimée : user_pref("CT2613520.WeatherPollDate", "Sat Feb 04 2012 19:10:49 GMT+0100"); Supprimée : user_pref("CT2613520.WeatherUnit", "C"); Supprimée : user_pref("CT2613520.alertChannelId", "1006317"); Supprimée : user_pref("CT2613520.clientLogIsEnabled", false); Supprimée : user_pref("CT2613520.clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.asm Supprimée : user_pref("CT2613520.components.1000082", true); Supprimée : user_pref("CT2613520.components.1000234", true); Supprimée : user_pref("CT2613520.ct2613520.AppTrackingLastCheckTime", "Sun Nov 20 2011 23:19:17 GMT+0100"); Supprimée : user_pref("CT2613520.ct2613520.DialogsAlignMode", "LTR"); Supprimée : user_pref("CT2613520.ct2613520.FirstTimeSettingsDone", true); Supprimée : user_pref("CT2613520.ct2613520.InvalidateCache", false); Supprimée : user_pref("CT2613520.ct2613520.LanguagePackLastCheckTime", "Sat Feb 04 2012 13:35:58 GMT+0100"); Supprimée : user_pref("CT2613520.ct2613520.Locale", "fr-fr"); Supprimée : user_pref("CT2613520.ct2613520.RadioLastCheckTime", "Sat Feb 04 2012 13:35:44 GMT+0100"); Supprimée : user_pref("CT2613520.ct2613520.RadioLastUpdateIPServer", "3"); Supprimée : user_pref("CT2613520.ct2613520.RadioLastUpdateServer", "0"); Supprimée : user_pref("CT2613520.ct2613520.SearchEngine", "Recherche||hxxp://search.conduit.com/Results.aspx?q=U Supprimée : user_pref("CT2613520.ct2613520.SearchInNewTabLastCheckTime", "Sat Feb 04 2012 13:35:43 GMT+0100"); Supprimée : user_pref("CT2613520.ct2613520.SettingsCheckIntervalMin", 120); Supprimée : user_pref("CT2613520.ct2613520.SettingsLastCheckTime", "Sat Feb 04 2012 18:05:01 GMT+0100"); Supprimée : user_pref("CT2613520.ct2613520.SettingsLastUpdate", "1321973221"); Supprimée : user_pref("CT2613520.ct2613520.ThirdPartyComponentsLastCheck", "Sun Jan 22 2012 21:57:00 GMT+0100"); Supprimée : user_pref("CT2613520.ct2613520.ThirdPartyComponentsLastUpdate", "1255348267"); Supprimée : user_pref("CT2613520.ct2613520.globalFirstTimeInfoLastCheckTime", "Sat Feb 04 2012 13:35:58 GMT+0100 Supprimée : user_pref("CT2613520.ct2613520.toolbarAppMetaDataLastCheckTime", "Sat Feb 04 2012 13:35:58 GMT+0100" Supprimée : user_pref("CT2613520.ct2613520.toolbarContextMenuLastCheckTime", "Sun Jan 22 2012 21:57:09 GMT+0100" Supprimée : user_pref("CT2613520.generalConfigFromLogin", "{\"ApiMaxAlerts\":\"12\",\"SocialDomains\":\"social.c Supprimée : user_pref("CT2613520.homepageProtectorEnableByLogin", true); Supprimée : user_pref("CT2613520.initDone", true); Supprimée : user_pref("CT2613520.isAppTrackingManagerOn", true); Supprimée : user_pref("CT2613520.isFirstRadioInstallation", false); Supprimée : user_pref("CT2613520.myStuffEnabled", true); Supprimée : user_pref("CT2613520.myStuffPublihserMinWidth", 400); Supprimée : user_pref("CT2613520.myStuffSearchUrl", "hxxp://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOr Supprimée : user_pref("CT2613520.myStuffServiceIntervalMM", 1440); Supprimée : user_pref("CT2613520.myStuffServiceUrl", "hxxp://mystuff.conduit-services.com/MyStuffService.ashx?Co Supprimée : user_pref("CT2613520.oldAppsList", "129171058074716794,129171058074873045,111,129171058075029296,129 Supprimée : user_pref("CT2613520.revertSettingsEnabled", true); Supprimée : user_pref("CT2613520.searchProtectorDialogDelayInSec", 10); Supprimée : user_pref("CT2613520.searchProtectorEnableByLogin", true); Supprimée : user_pref("CT2613520.testingCtid", ""); Supprimée : user_pref("CT2613520.uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/Reg Supprimée : user_pref("CT2613520.usagesFlag", 2); Supprimée : user_pref("CommunityToolbar.ETag.hxxp://Settings.toolbar.search.conduit.com/root/ct2613520/CT2613520 Supprimée : user_pref("CommunityToolbar.ETag.hxxp://appsmetadata.toolbar.conduit-services.com/?ctid=ct2613520", Supprimée : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=GottenApps&lo Supprimée : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=OtherApps&loc Supprimée : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=SharedApps&lo Supprimée : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=Toolbar&local Supprimée : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.alert.conduit-services.com/alert/dlg.pkg", "\ Supprimée : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.engine.conduit-services.com/DLG.pkg?ver=3.3.3 Supprimée : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.3. Supprimée : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.5. Supprimée : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.6. Supprimée : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.8. Supprimée : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.9. Supprimée : user_pref("CommunityToolbar.ETag.hxxp://servicemap.conduit-services.com/Toolbar/?ownerId=CT2613520", Supprimée : user_pref("CommunityToolbar.ETag.hxxp://settings.engine.conduit-services.com/?browser=FF&lut=0", "63 Supprimée : user_pref("CommunityToolbar.ETag.hxxp://settings.engine.conduit-services.com/?browser=FF&lut=3/13/20 Supprimée : user_pref("CommunityToolbar.ETag.hxxp://settings.toolbar.conduit-services.com/?ctid=ct2613520&octid= Supprimée : user_pref("CommunityToolbar.ETag.hxxp://settings.toolbar.search.conduit.com/root/ct2613520/CT2613520 Supprimée : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/20/261/CT2613520/Images/6340849620311100 Supprimée : user_pref("CommunityToolbar.ETag.hxxp://translation.toolbar.conduit-services.com/?locale=fr-fr", "\" Supprimée : user_pref("CommunityToolbar.EngineOwner", ""); Supprimée : user_pref("CommunityToolbar.EngineOwnerGuid", "{d7f26d0e-9801-45c3-a091-8a65e4ed73b5}"); Supprimée : user_pref("CommunityToolbar.EngineOwnerToolbarId", "protection_zonealarm"); Supprimée : user_pref("CommunityToolbar.IsEngineShown", true); Supprimée : user_pref("CommunityToolbar.IsMyStuffImportedToEngine", true); Supprimée : user_pref("CommunityToolbar.LatestLibsPath", "file:///C:\\Documents and Settings\\Shot\\Application Supprimée : user_pref("CommunityToolbar.LatestToolbarVersionInstalled", "3.9.0.3"); Supprimée : user_pref("CommunityToolbar.OriginalEngineOwner", "CT2613520"); Supprimée : user_pref("CommunityToolbar.OriginalEngineOwnerGuid", "{d7f26d0e-9801-45c3-a091-8a65e4ed73b5}"); Supprimée : user_pref("CommunityToolbar.OriginalEngineOwnerToolbarId", "protection_zonealarm"); Supprimée : user_pref("CommunityToolbar.SearchFromAddressBarSavedUrl", "chrome://browser-region/locale/region.pr Supprimée : user_pref("CommunityToolbar.ToolbarsList", "CT2613520"); Supprimée : user_pref("CommunityToolbar.ToolbarsList2", "CT2613520"); Supprimée : user_pref("CommunityToolbar.alert.alertDialogsGetterLastCheckTime", "Sun Jun 12 2011 18:04:52 GMT+02 Supprimée : user_pref("CommunityToolbar.alert.clientsServerUrl", "hxxp://alert.client.conduit.com"); Supprimée : user_pref("CommunityToolbar.alert.locale", "en"); Supprimée : user_pref("CommunityToolbar.alert.loginIntervalMin", 1440); Supprimée : user_pref("CommunityToolbar.alert.loginLastCheckTime", "Wed Jun 15 2011 23:24:24 GMT+0200"); Supprimée : user_pref("CommunityToolbar.alert.loginLastUpdateTime", "1305622559"); Supprimée : user_pref("CommunityToolbar.alert.messageShowTimeSec", 20); Supprimée : user_pref("CommunityToolbar.alert.servicesServerUrl", "hxxp://alert.services.conduit.com"); Supprimée : user_pref("CommunityToolbar.alert.showTrayIcon", false); Supprimée : user_pref("CommunityToolbar.alert.userCloseIntervalMin", 300); Supprimée : user_pref("CommunityToolbar.alert.userId", "b9378b7a-b189-4b06-9591-2f352f8be56a"); Supprimée : user_pref("CommunityToolbar.facebook.settingsLastCheckTime", "Sat Feb 04 2012 13:35:43 GMT+0100"); Supprimée : user_pref("CommunityToolbar.globalUserId", "910c11df-8759-4e70-9171-5688880c25e1"); Supprimée : user_pref("CommunityToolbar.isAlertUrlAddedToFeedItemTable", true); Supprimée : user_pref("CommunityToolbar.isClickActionAddedToFeedItemTable", true); Supprimée : user_pref("CommunityToolbar.keywordURLSelectedCTID", "CT2613520"); Supprimée : user_pref("CommunityToolbar.killedEngine", true); Supprimée : user_pref("CommunityToolbar.notifications.alertDialogsGetterLastCheckTime", "Sat Feb 04 2012 13:35:4 Supprimée : user_pref("CommunityToolbar.notifications.clientsServerUrl", "hxxp://alert.client.conduit.com"); Supprimée : user_pref("CommunityToolbar.notifications.locale", "en"); Supprimée : user_pref("CommunityToolbar.notifications.loginIntervalMin", 1440); Supprimée : user_pref("CommunityToolbar.notifications.loginLastCheckTime", "Sat Feb 04 2012 13:35:37 GMT+0100"); Supprimée : user_pref("CommunityToolbar.notifications.loginLastUpdateTime", "1313487611"); Supprimée : user_pref("CommunityToolbar.notifications.messageShowTimeSec", 20); Supprimée : user_pref("CommunityToolbar.notifications.servicesServerUrl", "hxxp://alert.services.conduit.com"); Supprimée : user_pref("CommunityToolbar.notifications.showTrayIcon", false); Supprimée : user_pref("CommunityToolbar.notifications.userCloseIntervalMin", 300); Supprimée : user_pref("CommunityToolbar.notifications.userId", "55152212-b1a7-4ea4-92b8-4e1493efb259"); Supprimée : user_pref("CommunityToolbar.undefined", ""); Supprimée : user_pref("browser.search.defaultengine", "Ask.com"); Supprimée : user_pref("browser.search.defaultenginename", "Ask.com"); Supprimée : user_pref("browser.search.defaultthis.engineName", "Protection ZoneAlarm Customized Web Search"); Supprimée : user_pref("browser.search.defaulturl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2613520&Sea Supprimée : user_pref("browser.search.order.1", "Ask.com"); Supprimée : user_pref("browser.search.selectedEngine", "Ask.com"); Supprimée : user_pref("extensions.asktb.AviraIDW-TS", "1321827558696"); Supprimée : user_pref("extensions.asktb.AviraIDW-XML", "<?xml version=\"1.0\" encoding=\"UTF-8\"?>\r\n<button xm Supprimée : user_pref("extensions.asktb.InstallDir", "C:\\Program Files\\Ask.com\\"); Supprimée : user_pref("extensions.asktb.cbid", "JM"); Supprimée : user_pref("extensions.asktb.config-updated", false); Supprimée : user_pref("extensions.asktb.crumb", "2011.09.05+23.31.33-toolbar013iad-FR-T3JsZWFucyxGcmFuY2U%3D"); Supprimée : user_pref("extensions.asktb.default-channel-url-mask", "hxxp://fr.ask.com/web?q={query}&qsrc={qsrc}& Supprimée : user_pref("extensions.asktb.dtid", "YYYYYYYYFR"); Supprimée : user_pref("extensions.asktb.ff-original-keyword-url", "hxxp://search.conduit.com/ResultsExt.aspx?cti Supprimée : user_pref("extensions.asktb.first-launch", true); Supprimée : user_pref("extensions.asktb.first-restart-after-config-update", true); Supprimée : user_pref("extensions.asktb.fresh-install", false); Supprimée : user_pref("extensions.asktb.guid", "ad83e039-934e-487a-9d47-978313027abd"); Supprimée : user_pref("extensions.asktb.hxxp-header-whitelist-hosts", " Supprimée : user_pref("extensions.asktb.if", "first"); Supprimée : user_pref("extensions.asktb.l", "dis"); Supprimée : user_pref("extensions.asktb.last-config-req", "1328566610163"); Supprimée : user_pref("extensions.asktb.last-v", "3.13.2.100010"); Supprimée : user_pref("extensions.asktb.locale", "fr_FR"); Supprimée : user_pref("extensions.asktb.location", "Orleans,France"); Supprimée : user_pref("extensions.asktb.notification-shown", true); Supprimée : user_pref("extensions.asktb.o", "100000080"); Supprimée : user_pref("extensions.asktb.overlay-reloaded-using-restart", true); Supprimée : user_pref("extensions.asktb.qsrc", "2871"); Supprimée : user_pref("extensions.asktb.r", "2"); Supprimée : user_pref("extensions.asktb.sa", "YES"); Supprimée : user_pref("extensions.asktb.saguid", "C05D03B6-DF8C-4D89-B2B8-695894DDB2B7"); Supprimée : user_pref("extensions.asktb.search-suggestions-enabled", true); Supprimée : user_pref("extensions.asktb.silent-upgrade", true); Supprimée : user_pref("extensions.asktb.silent-upgrade-from-pre-newtabs-build", false); Supprimée : user_pref("extensions.asktb.themeid", ""); Supprimée : user_pref("extensions.asktb.to", ""); Supprimée : user_pref("extensions.asktb.v", "3.14.1.100010"); Supprimée : user_pref("extensions.enabledAddons", "{d7f26d0e-9801-45c3-a091-8a65e4ed73b5}:3.9.0.3,toolbar@ask.co Supprimée : user_pref("keyword.URL", "hxxp://websearch.ask.com/redirect?client=ff&src=kw&tb=AVR-W1&o=100000080&l Profil : oe9kawho.default Fichier : C:\Documents and Settings\Shot\Application Data\Mozilla\Firefox\Profiles\oe9kawho.default\prefs.js Le fichier ne contient aucune entrée illégitime. ************************* AdwCleaner .txt - - AdwCleaner .txt - - ************************* Dossier Temporaire : 9 dossier(s) et 39 fichier(s) supprimés ########## EOF - C:\AdwCleaner .txt - ##########

Info45 · Answer 10 · Posté le 07/02/2012 à 00:36:53

--------------------- Ci après le rapport de la partie 2 ------------------ ======= RAPPORT D'AD-REMOVER 2.0.0.2,G | UNIQUEMENT XP/VISTA/7 ======= Mis à jour par TeamXscript le 12/04/11 Contact: AdRemover contact gmail com Site web: http://www.teamxscript.org C:\Program Files\Ad-Remover\main.exe (CLEAN ) -> Lancé à 00:27:38 le 07/02/2012, Mode normal Microsoft Windows XP Édition familiale Service Pack 3 (X86) Shot@SN012345678912 ( ) ============== ACTION(S) ============== Dossier supprimé: C:\Documents and Settings\Utilisateur\Application Data\AskToolbar (!) -- Fichiers temporaires supprimés. -- Fichier ouvert: C:\Documents and Settings\Utilisateur\Application Data\Mozilla\FireFox\Profiles\gfyc01vl.default\Prefs.js -- Ligne supprimée: user_pref("browser.search.defaultengine", "Ask.com"); Ligne supprimée: user_pref("browser.search.defaultenginename", "Ask.com"); Ligne supprimée: user_pref("browser.search.order.1", "Ask.com"); Ligne supprimée: user_pref("extensions.asktb.ff-original-keyword-url", "hxxp://search.live.com/results.aspx?mkt=fr-fr... -- Fichier Fermé -- Clé supprimée: HKLM\Software\Classes\Interface\{B0D071A1-36B3-4757-A126-14C89C56013A} Clé supprimée: HKLM\Software\Classes\Interface\{BA57E1EF-64BD-4EB9-9648-C5A73CBB03B9} Clé supprimée: HKLM\Software\Classes\TypeLib\{B4C656C9-F2E9-4E77-B3F4-443DF2BD778F} Clé supprimée: HKLM\Software\Classes\EoRezoBHO.EoBho Clé supprimée: HKLM\Software\Classes\EoRezoBHO.EoBho.1 Clé supprimée: HKCU\Software\Toolbar Clé supprimée: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{A0107170-2917-4397-9100-7C5941ADFB70} Clé supprimée: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{64F56FC1-1272-44CD-BA6E-39723696E350} Clé supprimée: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D4027C7F-154A-4066-A1AD-4243D8127440} ============== SCAN ADDITIONNEL ============== **** Mozilla Firefox Version **** HKLM_MozillaPlugins\@checkpoint.com/FFApi (x) HKLM_MozillaPlugins\Adobe Reader (x) HKLM_MozillaPlugins\yaxmpb@yahoo.com/YahooActiveXPluginBridge;version=1.0.0.1 (x) Searchplugins\bing.xml ( hxxp://www.bing.com/search) Components\browsercomps.dll (Mozilla Foundation) HKLM_Extensions|smartwebprinting@hp.com - C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 HKCU_Extensions|smartwebprinting@hp.com - C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 -- C:\Documents and Settings\Shot\Application Data\Mozilla\FireFox\Profiles\8lrhl7pf.default -- Extensions\{d7f26d0e-9801-45c3-a091-8a65e4ed73b5} (Protection ZoneAlarm Community Toolbar) Prefs.js - browser.download.lastDir, E:\\Travail\\Informatique\\Logiciels\\Utilitaires\\AntiMalware\\AD Remover Prefs.js - browser.startup.homepage, file:///E:/Travail/Informatique/Develop/FrontPage/MonSiteWeb/index.htm|hxxp://www.infos-du-net... Prefs.js - browser.startup.homepage_override.buildID, 20120129021758 Prefs.js - browser.startup.homepage_override.mstone, rv:10.0 -- C:\Documents and Settings\Utilisateur\Application Data\Mozilla\FireFox\Profiles\gfyc01vl.default -- Extensions\keefox@chris.tomlinson (KeeFox) Extensions\{6e764c17-863a-450f-bdd0-6772bd5aaa18} (Media Converter) Searchplugins\LiveSearch.xml ( hxxp://search.live.com/results.aspx) Prefs.js - browser.download.dir, E:\\Travail\\Tempo\\Informatique\\Logiciel Prefs.js - browser.download.lastDir, E:\\Travail\\Informatique\\Logiciels\\Utilitaires Prefs.js - browser.search.selectedEngine, Google Prefs.js - browser.startup.homepage, E:\\Travail\\Informatique\\Develop\\FrontPage\\MonSiteWeb\\index.htm Prefs.js - browser.startup.homepage_override.buildID, 20120129021758 Prefs.js - browser.startup.homepage_override.mstone, rv:10.0 Prefs.js - keyword.URL, hxxp://search.live.com/results.aspx?mkt=fr-fr&FORM=MIMWA1&q= ======================================== **** Internet Explorer Version **** HKCU_Main|Default_Page_URL - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome HKCU_Main|Default_Search_URL - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKCU_Main|Search bar - hxxp://go.microsoft.com/fwlink/?linkid=54896 HKCU_Main|Start Page - hxxp://fr.msn.com/ HKLM_Main|Default_Page_URL - hxxp://go.microsoft.com/fwlink/?LinkId=54896 HKLM_Main|Default_Search_URL - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKLM_Main|Search bar - hxxp://search.msn.com/spbasic.htm HKLM_Main|Search Page - hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKLM_Main|Start Page - hxxp://fr.msn.com/ HKCU_Toolbar\WebBrowser|{C55BBCD6-41AD-48AD-9953-3609C48EACC7} (C:\Program Files\Orbitdownloader\GrabPro.dll) HKLM_Toolbar|{F2E259E8-0FC8-438C-A6E0-342DD80FA53E} (C:\PROGRA~1\COPERN~1\COPERN~1.DLL) HKLM_Toolbar|{B28B4479-D9C2-41D1-B74D-74A1827037CD} (C:\Program Files\PixVue.Com\PixVue\bin\PixVue.dll) HKLM_Toolbar|{300BC64A-BF32-4cc8-8917-91148CEFE700} (c:\progra~1\DropMyRights\PrivBar.dll) HKLM_Toolbar|{C55BBCD6-41AD-48AD-9953-3609C48EACC7} (C:\Program Files\Orbitdownloader\GrabPro.dll) HKLM_ElevationPolicy\2C7B74DE-3A9E-4CD3-A8DB-47411E9680A8 - C:\WINDOWS\system32\VirginMega\DownloadManagerLightInterface.exe (VirginMega) HKLM_ElevationPolicy\{06DB122E-3BE4-4CB8-91CA-74494C8C8FBC} - C:\Documents and Settings\Shot\Local Settings\Application Data\Conduit\CT2613520\Protection_ZoneAlarmAutoUpdateHelper.exe (x) HKLM_ElevationPolicy\{4250488A-CB24-0893-C066-B1AEA57BCFF2} - C:\Program Files\Orbitdownloader\orbitdm.exe (Orbitdownloader.com) HKLM_ElevationPolicy\{84342248-746E-412B-BEFB-950770C2A78E} - C:\Documents and Settings\Shot\Local Settings\Application Data\Conduit\CT2613520\Protection_ZoneAlarmAutoUpdateHelper.exe (x) HKLM_ElevationPolicy\{FAD42A46-4172-4FFA-9EAF-24BC0C66B0F2} - C:\Program Files\Protection_ZoneAlarm\Protection_ZoneAlarmToolbarHelper1.exe (x) HKLM_ElevationPolicy\{} - C:\WINDOWS\system32\VirginMega\Dml_Atl.dll (VirginMega) HKLM_Extensions\{DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - "?" (?) HKLM_Extensions\{e2e2dd38-d088-4134-82b7-f2ba38496583} - "?" (?) BHO\{000123B4-9B42-4900-B3F7-F4B073EFC214} - "Octh Class" (C:\Program Files\Orbitdownloader\orbitcth.dll) BHO\{5C255C8A-E604-49b4-9D64-90988571CECB} (?) BHO\{64F56FC1-1272-44CD-BA6E-39723696E350} (?) BHO\{D4027C7F-154A-4066-A1AD-4243D8127440} (?) ======================================== C:\Program Files\Ad-Remover\Quarantine: 2 Fichier(s) C:\Program Files\Ad-Remover\Backup: 14 Fichier(s) C:\Ad-Report-CLEAN .txt - 07/02/2012 00:27:52 (5854 Octet(s)) Fin à: 00:29:07, 07/02/2012 ============== E.O.F ==============

Info45 · Answer 11 · Posté le 07/02/2012 à 01:19:48

----------- Ci après rapport Malwarebytes en Analyse rapide ----------- Malwarebytes Anti-Malware 1.60.1.1000 www.malwarebytes.org Version de la base de données: v2012.02.06.06 Windows XP Service Pack 3 x86 NTFS Internet Explorer 8.0.6001.18702 Shot :: SN012345678912 07/02/2012 00:54:33 mbam-log-2012-02-07 (00-54-33).txt Type d'examen: Examen rapide Options d'examen activées: Mémoire | Démarrage | Registre | Système de fichiers | Heuristique/Extra | Heuristique/Shuriken | PUP | PUM Options d'examen désactivées: P2P Elément(s) analysé(s): 222528 Temps écoulé: 23 minute(s), Processus mémoire détecté(s): 0 (Aucun élément nuisible détecté) Module(s) mémoire détecté(s): 0 (Aucun élément nuisible détecté) Clé(s) du Registre détectée(s): 0 (Aucun élément nuisible détecté) Valeur(s) du Registre détectée(s): 0 (Aucun élément nuisible détecté) Elément(s) de données du Registre détecté(s): 0 (Aucun élément nuisible détecté) Dossier(s) détecté(s): 0 (Aucun élément nuisible détecté) Fichier(s) détecté(s): 0 (Aucun élément nuisible détecté) (fin)

Info45 · Answer 12 · Posté le 07/02/2012 à 01:21:58

Ce sera tout pour ce soir Je reviendrai au nouvelle demain Merci beaucoup de votre aide Je vous souhaite bonne nuit

kmisol · Answer 13 · Posté le 07/02/2012 à 08:41:24

Hello, OK. Relance un scan RSIT et poste, uniquement, le rapport qui s'affiche (log.txt). PS : http://forum.telecharger.01net.com/telecharger/securite/information-concernant-bouton-repondre-les-sujets-451742/messages-1.html

Info45 · Answer 14 · Posté le 07/02/2012 à 10:02:06

Bonjour, Voici le rapport RSIT de ce matin Logfile of random's system information tool 1.09 (written by random/random) Run by Shot at 2012-02-07 09:59:53 Microsoft Windows XP Édition familiale Service Pack 3 System drive C: has 4 GB (14%) free of 30 GB Total RAM: 1014 MB (18% free) Logfile of Trend Micro HijackThis v2.0.4 Scan saved at 10:00:42, on 07/02/2012 Platform: Windows XP SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v8.00 (8.00.6001.18702) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\csrss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\ZoneLabs\vsmon.exe C:\WINDOWS\system32\spoolsv.exe c:\program files\fichiers communs\logitech\lvmvfm\LVPrcSrv.exe C:\WINDOWS\Explorer.EXE C:\Program Files\Fichiers communs\EPSON\EBAPI\eEBSVC.exe C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe c:\APPS\Powercinema\Kernel\TV\CLCapSvc.exe C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLServer.exe C:\Program Files\Fichiers communs\EPSON\EBAPI\SAgent2.exe c:\APPS\HIDSERVICE\HIDSERVICE.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\Java\jre6\bin\jqs.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\PixVue.Com\PixVue\bin\Daemon.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Retrospect\Retrospect Express HD 2.5\retrorun.exe C:\WINDOWS\system32\svchost.exe c:\APPS\Powercinema\Kernel\TV\CLSched.exe C:\Program Files\Synaptics\SynTP\SynTPEnh.exe C:\WINDOWS\AGRSMMSG.exe C:\WINDOWS\system32\igfxtray.exe C:\WINDOWS\system32\hkcmd.exe C:\WINDOWS\system32\igfxpers.exe C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\SuperCopier2\SuperCopier2.exe C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe C:\Program Files\Avira\AntiVir Desktop\AVWEBGRD.EXE C:\WINDOWS\System32\alg.exe C:\WINDOWS\system32\wuauclt.exe C:\WINDOWS\system32\taskmgr.exe C:\Program Files\Avira\AntiVir Desktop\avguard.exe C:\Program Files\Avira\AntiVir Desktop\avshadow.exe C:\Program Files\Avira\AntiVir Desktop\sched.exe C:\Program Files\Avira\AntiVir Desktop\avgnt.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Mozilla Firefox\plugin-container.exe C:\Program Files\Mozilla Firefox\plugin-container.exe c:\program files\avira\antivir desktop\avcenter.exe C:\Program Files\Adobe\Reader 9.0\Reader\AcroRd32.exe C:\Documents and Settings\Shot\Bureau\RSIT.exe C:\WINDOWS\system32\wbem\wmiprvse.exe C:\Program Files\trend micro\Shot.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://go.microsoft.com/fwlink/?linkid=54896 R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.msn.com/ R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.msn.com/ R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://go.microsoft.com/fwlink/?LinkId=74005 R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens R3 - URLSearchHook: Protection ZoneAlarm Toolbar - {d7f26d0e-9801-45c3-a091-8a65e4ed73b5} - C:\Program Files\Protection_ZoneAlarm\prxtbProt.dll O2 - BHO: btorbit.com - {000123B4-9B42-4900-B3F7-F4B073EFC214} - C:\Program Files\Orbitdownloader\orbitcth.dll O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll O2 - BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file) O2 - BHO: EoRezoBHO - {64F56FC1-1272-44CD-BA6E-39723696E350} - (no file) O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: (no name) - {D4027C7F-154A-4066-A1AD-4243D8127440} - (no file) O2 - BHO: Protection ZoneAlarm - {d7f26d0e-9801-45c3-a091-8a65e4ed73b5} - C:\Program Files\Protection_ZoneAlarm\prxtbProt.dll O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll O2 - BHO: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll O3 - Toolbar: Copernic Agent - {F2E259E8-0FC8-438C-A6E0-342DD80FA53E} - C:\PROGRA~1\COPERN~1\COPERN~1.DLL O3 - Toolbar: &PixVue - {B28B4479-D9C2-41D1-B74D-74A1827037CD} - C:\Program Files\PixVue.Com\PixVue\bin\PixVue.dll O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll O3 - Toolbar: PrivBar - {300BC64A-BF32-4cc8-8917-91148CEFE700} - c:\progra~1\DropMyRights\PrivBar.dll O3 - Toolbar: Grab Pro - {C55BBCD6-41AD-48AD-9953-3609C48EACC7} - C:\Program Files\Orbitdownloader\GrabPro.dll O3 - Toolbar: Protection ZoneAlarm Toolbar - {d7f26d0e-9801-45c3-a091-8a65e4ed73b5} - C:\Program Files\Protection_ZoneAlarm\prxtbProt.dll O4 - HKLM\..\Run: "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32 O4 - HKLM\..\Run: C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC O4 - HKLM\..\Run: C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName O4 - HKLM\..\Run: HDAShCut.exe O4 - HKLM\..\Run: C:\Program Files\Synaptics\SynTP\SynTPEnh.exe O4 - HKLM\..\Run: AGRSMMSG.exe O4 - HKLM\..\Run: C:\WINDOWS\system32\NeroCheck.exe O4 - HKLM\..\Run: C:\WINDOWS\system32\igfxtray.exe O4 - HKLM\..\Run: C:\WINDOWS\system32\hkcmd.exe O4 - HKLM\..\Run: C:\WINDOWS\system32\igfxpers.exe O4 - HKLM\..\Run: "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min O4 - HKLM\..\Run: "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe" O4 - HKCU\..\Run: C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: C:\Program Files\SuperCopier2\SuperCopier2.exe O4 - HKCU\..\Run: C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe O4 - HKUS\S-1-5-19\..\Run: C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL') O4 - HKUS\S-1-5-20\..\Run: C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU') O4 - HKUS\S-1-5-18\..\Run: C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: C:\WINDOWS\system32\CTFMON.EXE (User 'Default user') O4 - Global Startup: MonacoGamma.lnk = C:\Program Files\Monaco Systems\MonacoOPTIX 2.0\MonacoGamma.exe O8 - Extra context menu item: &Download by Orbit - res://C:\Program Files\Orbitdownloader\orbitmxt.dll/201 O8 - Extra context menu item: &Grab video by Orbit - res://C:\Program Files\Orbitdownloader\orbitmxt.dll/204 O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\WINDOWS\system32\GPhotos.scr/200 O8 - Extra context menu item: Do&wnload selected by Orbit - res://C:\Program Files\Orbitdownloader\orbitmxt.dll/203 O8 - Extra context menu item: Down&load all by Orbit - res://C:\Program Files\Orbitdownloader\orbitmxt.dll/202 O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000 O9 - Extra button: Run WinHTTrack - {36ECAF82-3300-8F84-092E-AFF36D6C7040} - C:\Program Files\WinHTTrack\WinHTTrackIEBar.dll O9 - Extra 'Tools' menuitem: Launch WinHTTrack - {36ECAF82-3300-8F84-092E-AFF36D6C7040} - C:\Program Files\WinHTTrack\WinHTTrackIEBar.dll O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL O9 - Extra button: Afficher ou masquer l'HP Smart Web Printing - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O14 - IERESET.INF: START_PAGE_URL=file://C:\APPS\IE\offline\fr.htm O16 - DPF: {2C7B74DE-3A9E-4CD3-A8DB-47411E9680A8} (VirginMega.DML.Interface) - http://alice.vm-wl.com/Telechargement/DownManLight.cab O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll O16 - DPF: {56762DEC-6B0D-4AB4-A8AD-989993B5D08B} (OnlineScanner Control) - http://www.eset.eu/buxus/docs/OnlineScanner.cab O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab O16 - DPF: {DEB21AD3-FDA4-42F6-B57D-EE696A675EE8} (IPSUploader Control) - http://as.photoprintit.de/ips-opdata/layout/default01/activex/IPSUploader.cab O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} (get_atlcom Class) - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab O18 - Protocol: bw+0 - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw+0s - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw-0 - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw-0s - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw00 - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw00s - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw10 - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw10s - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw20 - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw20s - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw30 - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw30s - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw40 - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw40s - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw50 - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw50s - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw60 - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw60s - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw70 - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw70s - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw80 - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw80s - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw90 - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw90s - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwa0 - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwa0s - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwb0 - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwb0s - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwc0 - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwc0s - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwd0 - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwd0s - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwe0 - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwe0s - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwf0 - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwf0s - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll O18 - Protocol: bwg0 - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwg0s - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwh0 - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwh0s - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwi0 - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwi0s - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwj0 - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwj0s - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwk0 - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwk0s - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwl0 - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwl0s - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwm0 - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwm0s - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwn0 - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwn0s - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwo0 - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwo0s - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwp0 - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwp0s - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwq0 - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwq0s - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwr0 - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwr0s - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bws0 - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bws0s - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwt0 - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwt0s - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwu0 - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwu0s - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwv0 - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwv0s - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bww0 - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bww0s - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwx0 - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwx0s - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwy0 - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwy0s - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwz0 - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwz0s - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: offline-8876480 - {47254DEC-7729-40E0-B08D-9EA7A1A661B9} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O22 - SharedTaskScheduler: Pré-chargeur Browseui - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll O22 - SharedTaskScheduler: Démon de cache des catégories de composant - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll O23 - Service: Avira Planificateur (AntiVirSchedulerService) - Avira Operations GmbH & Co. KG - C:\Program Files\Avira\AntiVir Desktop\sched.exe O23 - Service: Avira Protection temps réel (AntiVirService) - Avira Operations GmbH & Co. KG - C:\Program Files\Avira\AntiVir Desktop\avguard.exe O23 - Service: Avira Protection Web (AntiVirWebService) - Avira Operations GmbH & Co. KG - C:\Program Files\Avira\AntiVir Desktop\AVWEBGRD.EXE O23 - Service: AOL Connectivity Service (AOL ACS) - America Online, Inc. - C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - c:\APPS\Powercinema\Kernel\TV\CLCapSvc.exe O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - c:\APPS\Powercinema\Kernel\TV\CLSched.exe O23 - Service: CyberLink Media Library Service - Cyberlink - C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLServer.exe O23 - Service: Service d'administration du Gestionnaire de disque logique (dmadmin) - Unknown owner - C:\WINDOWS\System32\dmadmin.exe O23 - Service: EpsonBidirectionalService - Unknown owner - C:\Program Files\Fichiers communs\EPSON\EBAPI\eEBSVC.exe O23 - Service: EPSON Printer Status Agent2 (EPSONStatusAgent2) - SEIKO EPSON CORPORATION - C:\Program Files\Fichiers communs\EPSON\EBAPI\SAgent2.exe O23 - Service: Journal des événements (Eventlog) - Unknown owner - C:\WINDOWS\system32\services.exe O23 - Service: Generic Service for HID Keyboard Input Collections (GenericHidService) - Unknown owner - c:\APPS\HIDSERVICE\HIDSERVICE.exe O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1150\Intel 32\IDriverT.exe O23 - Service: Service COM de gravage de CD IMAPI (ImapiService) - Unknown owner - C:\WINDOWS\system32\imapi.exe O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe O23 - Service: Process Monitor (LVPrcSrv) - Logitech Inc. - c:\program files\fichiers communs\logitech\lvmvfm\LVPrcSrv.exe O23 - Service: LVSrvLauncher - Logitech Inc. - C:\Program Files\Fichiers communs\Logitech\SrvLnch\SrvLnch.exe O23 - Service: Partage de Bureau à distance NetMeeting (mnmsrvc) - Unknown owner - C:\WINDOWS\system32\mnmsrvc.exe O23 - Service: MySqlInventime - Unknown owner - c:\mysql\bin\mysqld-max-nt.exe O23 - Service: PixVue - PixVue.Com - C:\Program Files\PixVue.Com\PixVue\bin\Daemon.exe O23 - Service: Planificateur LiveUpdate automatique - Unknown owner - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe (file missing) O23 - Service: Plug-and-Play (PlugPlay) - Unknown owner - C:\WINDOWS\system32\services.exe O23 - Service: Gestionnaire de session d'aide sur le Bureau à distance (RDSessMgr) - Unknown owner - C:\WINDOWS\system32\sessmgr.exe O23 - Service: Retrospect Express HD Launcher (RetroExpLauncher) - EMC Corporation - C:\Program Files\Retrospect\Retrospect Express HD 2.5\retrorun.exe O23 - Service: Carte à puce (SCardSvr) - Unknown owner - C:\WINDOWS\System32\SCardSvr.exe O23 - Service: SwitchBoard - Adobe Systems Incorporated - C:\Program Files\Fichiers communs\Adobe\SwitchBoard\SwitchBoard.exe O23 - Service: Journaux et alertes de performance (SysmonLog) - Unknown owner - C:\WINDOWS\system32\smlogsvc.exe O23 - Service: UPnPService - Magix AG - C:\Program Files\Fichiers communs\MAGIX Shared\UPnPService\UPnPService.exe O23 - Service: TrueVector Internet Monitor (vsmon) - Check Point Software Technologies LTD - C:\WINDOWS\system32\ZoneLabs\vsmon.exe O23 - Service: Cliché instantané de volume (VSS) - Unknown owner - C:\WINDOWS\System32\vssvc.exe O23 - Service: Carte de performance WMI (WmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\wmiapsrv.exe O23 - Service: Service Partage réseau du Lecteur Windows Media (WMPNetworkSvc) - Unknown owner - C:\Program Files\Windows Media Player\WMPNetwk.exe -- End of file - 26829 bytes ======Scheduled tasks folder====== C:\WINDOWS\tasks\AdobeAAMUpdater-1.0-SN012345678912-Utilisateur.job C:\WINDOWS\tasks\ParetoLogic Registration3.job =========Mozilla firefox========= ProfilePath - C:\Documents and Settings\Shot\Application Data\Mozilla\Firefox\Profiles\8lrhl7pf.default prefs.js - "browser.search.useDBForOrder" - true prefs.js - "browser.startup.homepage" - "file:///E:/Travail/Informatique/Develop/FrontPage/MonSiteWeb/index.htm|http://www.infos-du-net.com/forum/9869-10-ntfs-fat32|http://www.jurixt.com/xp/xp_15.htm|http://www.trucs-et-astuces-windows.com/technique_pc/choix_ntfs_fat.html" prefs.js - "extensions.enabledItems" - "{20a82645-c095-46ed-80e3-08825760534b}:1.2.1, {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}:6.0.20, jqs@sun.com:1.0, smartwebprinting@hp.com:4.51, {d7f26d0e-9801-45c3-a091-8a65e4ed73b5}:2.7.1.3, {35379F86-8CCB-4724-AE33-4278DE266C70}:1.0.5, {972ce4c6-7e08-4474-a285-3208198ce6fd}:3.6.17" "{20a82645-c095-46ed-80e3-08825760534b}"=C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\ "jqs@sun.com"=C:\Program Files\Java\jre6\lib\deploy\jqs\ff "smartwebprinting@hp.com"=C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 "Description"=Adobe® Flash® Player 10.1 Plugin "Path"=C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll "Description"=Canon MycameraPlugin "Path"=C:\Program Files\Canon\MyCamera Download Plugin\NPCIG.dll "Description"=ZoneAlarm Toolbar Api "Path"=C:\Program Files\CheckPoint\ZAForceField\TrustChecker\bin\npFFApi.dll "Description"=Picasa3 plugin "Path"=C:\Program Files\Picasa3\npPicasa3.dll "Description"=WLPG Install MIME type "Path"=C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll "Description"=Windows Presentation Foundation plug-in for Mozilla browsers "Path"=C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll "Description"=Handles PDFs in-place in Firefox "Path"=C:\Program Files\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll "Description"=Yahoo! activeX Plug-in Bridge "Path"=C:\Program Files\Yahoo!\Common\npyaxmpb.dll C:\Program Files\Mozilla Firefox\extensions\ {972ce4c6-7e08-4474-a285-3208198ce6fd} C:\Program Files\Mozilla Firefox\components\ binary.manifest browsercomps.dll nsIQTScriptablePlugin.xpt C:\Program Files\Mozilla Firefox\plugins\ np-mswmp.dll npdeployJava1.dll NPOFFICE.DLL nppdf32.dll nppdf32.FRA npqtplugin.dll npqtplugin2.dll npqtplugin3.dll npqtplugin4.dll npqtplugin5.dll npqtplugin6.dll npqtplugin7.dll np_gp.dll nsIQTScriptablePlugin.xpt QuickTimePlugin.class WMP Firefox Plugin License.rtf WMP Firefox Plugin RelNotes.txt C:\Program Files\Mozilla Firefox\searchplugins\ amazon-france.xml bing.xml cnrtl-tlfi-fr.xml eBay-france.xml google.xml wikipedia-fr.xml yahoo-france.xml C:\Documents and Settings\Shot\Application Data\Mozilla\Firefox\Profiles\8lrhl7pf.default\extensions\ {20a82645-c095-46ed-80e3-08825760534b} {d7f26d0e-9801-45c3-a091-8a65e4ed73b5} ======Registry dump====== Octh Class - C:\Program Files\Orbitdownloader\orbitcth.dll Yahoo! Toolbar Helper - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll HP Print Enhancer - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll Adobe PDF Link Helper - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll Spybot-S&D IE Protection - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll Programme d'aide de l'Assistant de connexion Windows Live - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll Protection ZoneAlarm Toolbar - C:\Program Files\Protection_ZoneAlarm\prxtbProt.dll Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll HP Smart BHO Class - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll {F2E259E8-0FC8-438C-A6E0-342DD80FA53E} - Copernic Agent - C:\PROGRA~1\COPERN~1\COPERN~1.DLL {B28B4479-D9C2-41D1-B74D-74A1827037CD} - &PixVue - C:\Program Files\PixVue.Com\PixVue\bin\PixVue.dll {EF99BD32-C1FB-11D2-892F-0090271D4F88} - Yahoo! Toolbar avec bloqueur de fenêtres pop-up - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll {300BC64A-BF32-4cc8-8917-91148CEFE700} - PrivBar - c:\progra~1\DropMyRights\PrivBar.dll {C55BBCD6-41AD-48AD-9953-3609C48EACC7} - Grab Pro - C:\Program Files\Orbitdownloader\GrabPro.dll {d7f26d0e-9801-45c3-a091-8a65e4ed73b5} - Protection ZoneAlarm Toolbar - C:\Program Files\Protection_ZoneAlarm\prxtbProt.dll "IMJPMIG8.1"=C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE "PHIME2002ASync"=C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE "PHIME2002A"=C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE "Raccourci vers la page des propriétés de High Definition Audio"=C:\WINDOWS\system32\HDAShCut.exe "SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe "AGRSMMSG"=C:\WINDOWS\AGRSMMSG.exe "NeroFilterCheck"=C:\WINDOWS\system32\NeroCheck.exe ""= "HotKeysCmds"=C:\WINDOWS\system32\hkcmd.exe "Persistence"=C:\WINDOWS\system32\igfxpers.exe "avgnt"=C:\Program Files\Avira\AntiVir Desktop\avgnt.exe "ZoneAlarm Client"=C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe "CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe "SuperCopier2.exe"=C:\Program Files\SuperCopier2\SuperCopier2.exe "SpybotSD TeaTimer"=C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe "AdobeBridge"= C:\Program Files\Fichiers communs\Adobe\ARM\1.0\AdobeARM.exe C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe C:\Program Files\Fichiers communs\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe C:\Program Files\Fichiers communs\Adobe\CS5.5ServiceManager\CS5.5ServiceManager.exe F:\OI\Tutorom\Asuite1512\asuite.exe C:\Program Files\DAEMON Tools Lite\DTLite.exe C:\Program Files\HP\HP Software Update\HPWuSchd2.exe C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe C:\Program Files\Fichiers communs\Logitech\LComMgr\Communications_Helper.exe C:\Program Files\Logitech\QuickCam10\QuickCam10.exe C:\Program Files\Fichiers communs\Logitech\LComMgr\LVComSX.exe c:\Apps\Powercinema\PCMService.exe C:\Program Files\QuickTime\qttask.exe C:\Program Files\Real\RealPlayer\RealPlay.exe C:\PROGRA~1\RETROS~1\RETROS~1.5\RetroExpress.exe C:\WINDOWS\RTHDCPL.EXE C:\Program Files\Fichiers communs\Java\Java Update\jusched.exe C:\Program Files\Fichiers communs\Adobe\SwitchBoard\SwitchBoard.exe C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage MonacoGamma.lnk - C:\Program Files\Monaco Systems\MonacoOPTIX 2.0\MonacoGamma.exe C:\WINDOWS\system32\igfxdev.dll C:\Program Files\PixVue.Com\PixVue\bin\WinLogon.DLL C:\WINDOWS\system32\WgaLogon.dll WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll "notification packages"=:\WINDOWS\syste "dontdisplaylastusername"=0 "legalnoticecaption"= "legalnoticetext"= "shutdownwithoutlogon"=1 "undockwithoutlogon"=1 "NoDriveTypeAutoRun"=145 "NoDriveAutoRun"=67108863 "NoDriveTypeAutoRun"=255 "HonorAutoRunSetting"=1 "%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000" "%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019" "C:\Program Files\MSN Messenger\livecall.exe"="C:\Program Files\MSN Messenger\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)" "C:\Program Files\Orbitdownloader\orbitdm.exe"="C:\Program Files\Orbitdownloader\orbitdm.exe:*:Enabled:Orbit" "C:\Program Files\Orbitdownloader\orbitnet.exe"="C:\Program Files\Orbitdownloader\orbitnet.exe:*:Enabled:Orbit" "C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe:*:Enabled:hpqtra08.exe" "C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe:*:Enabled:hpqste08.exe" "C:\Program Files\HP\Digital Imaging\bin\hposid01.exe"="C:\Program Files\HP\Digital Imaging\bin\hposid01.exe:*:Enabled:hposid01.exe" "C:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe:*:Enabled:hpqkygrp.exe" "C:\Program Files\HP\Digital Imaging\bin\hpfcCopy.exe"="C:\Program Files\HP\Digital Imaging\bin\hpfcCopy.exe:*:Enabled:hpfccopy.exe" "C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe"="C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe:*:Enabled:hpoews01.exe" "C:\Program Files\HP\Digital Imaging\bin\hpiscnapp.exe"="C:\Program Files\HP\Digital Imaging\bin\hpiscnapp.exe:*:Enabled:hpiscnapp.exe" "C:\Program Files\HP\Digital Imaging\bin\hpqgplgtupl.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqgplgtupl.exe:*:Enabled:hpqgplgtupl.exe" "C:\Program Files\HP\Digital Imaging\bin\hpqgpc01.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqgpc01.exe:*:Enabled:hpqgpc01.exe" "C:\Program Files\HP\Digital Imaging\bin\hpqusgm.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqusgm.exe:*:Enabled:hpqusgm.exe" "C:\Program Files\HP\Digital Imaging\bin\hpqusgh.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqusgh.exe:*:Enabled:hpqusgh.exe" "C:\Program Files\HP\HP Software Update\HPWUCli.exe"="C:\Program Files\HP\HP Software Update\HPWUCli.exe:*:Enabled:hpwucli.exe" "C:\Program Files\HP\Digital Imaging\smart web printing\SmartWebPrintExe.exe"="C:\Program Files\HP\Digital Imaging\smart web printing\SmartWebPrintExe.exe:*:Enabled:smartwebprintexe.exe" "C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger" "C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe"="C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe:*:Enabled:Windows Live FolderShare" "C:\WINDOWS\system32\ZoneLabs\vsmon.exe"="C:\WINDOWS\system32\ZoneLabs\vsmon.exe:*:Enabled:vsmon" "%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000" "%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019" "C:\Program Files\MSN Messenger\livecall.exe"="C:\Program Files\MSN Messenger\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)" "C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe:*:Enabled:hpqtra08.exe" "C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe:*:Enabled:hpqste08.exe" "C:\Program Files\HP\Digital Imaging\bin\hposid01.exe"="C:\Program Files\HP\Digital Imaging\bin\hposid01.exe:*:Enabled:hposid01.exe" "C:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqkygrp.exe:*:Enabled:hpqkygrp.exe" "C:\Program Files\HP\Digital Imaging\bin\hpfcCopy.exe"="C:\Program Files\HP\Digital Imaging\bin\hpfcCopy.exe:*:Enabled:hpfccopy.exe" "C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe"="C:\Program Files\HP\Digital Imaging\bin\hpoews01.exe:*:Enabled:hpoews01.exe" "C:\Program Files\HP\Digital Imaging\bin\hpiscnapp.exe"="C:\Program Files\HP\Digital Imaging\bin\hpiscnapp.exe:*:Enabled:hpiscnapp.exe" "C:\Program Files\HP\Digital Imaging\bin\hpqgplgtupl.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqgplgtupl.exe:*:Enabled:hpqgplgtupl.exe" "C:\Program Files\HP\Digital Imaging\bin\hpqgpc01.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqgpc01.exe:*:Enabled:hpqgpc01.exe" "C:\Program Files\HP\Digital Imaging\bin\hpqusgm.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqusgm.exe:*:Enabled:hpqusgm.exe" "C:\Program Files\HP\Digital Imaging\bin\hpqusgh.exe"="C:\Program Files\HP\Digital Imaging\bin\hpqusgh.exe:*:Enabled:hpqusgh.exe" "C:\Program Files\HP\HP Software Update\HPWUCli.exe"="C:\Program Files\HP\HP Software Update\HPWUCli.exe:*:Enabled:hpwucli.exe" "C:\Program Files\HP\Digital Imaging\smart web printing\SmartWebPrintExe.exe"="C:\Program Files\HP\Digital Imaging\smart web printing\SmartWebPrintExe.exe:*:Enabled:smartwebprintexe.exe" "C:\Program Files\Windows Live\Messenger\msnmsgr.exe"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger" "C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe"="C:\Program Files\Windows Live\Sync\WindowsLiveSync.exe:*:Enabled:Windows Live FolderShare" "midimapper"=midimap.dll "msacm.imaadpcm"=imaadp32.acm "msacm.msadpcm"=msadp32.acm "msacm.msg711"=msg711.acm "msacm.msgsm610"=msgsm32.acm "msacm.trspch"=tssoft32.acm "vidc.cvid"=iccvid.dll "VIDC.I420"=lvcodec2.dll "vidc.iv31"=ir32_32.dll "vidc.iv32"=ir32_32.dll "vidc.iv41"=ir41_32.ax "VIDC.IYUV"=iyuv_32.dll "vidc.mrle"=msrle32.dll "vidc.msvc"=msvidc32.dll "VIDC.UYVY"=msyuv.dll "VIDC.YUY2"=msyuv.dll "VIDC.YVU9"=tsbyuv.dll "VIDC.YVYU"=msyuv.dll "wavemapper"=msacm32.drv "msacm.msg723"=msg723.acm "vidc.M263"=msh263.drv "vidc.M261"=msh261.drv "msacm.msaudio1"=msaud32.acm "msacm.sl_anet"=sl_anet.acm "msacm.iac2"=C:\WINDOWS\system32\iac25_32.ax "vidc.iv50"=ir50_32.dll "msacm.l3acm"=C:\WINDOWS\system32\l3codeca.acm "wave"=wdmaud.drv "midi"=wdmaud.drv "mixer"=wdmaud.drv "aux"=wdmaud.drv "msacm.siren"=sirenacm.dll "MSVideo8"=VfWWDM32.dll "MSVideo"=vfwwdm32.dll "wave1"=wdmaud.drv "midi1"=wdmaud.drv "mixer1"=wdmaud.drv "aux1"=wdmaud.drv "vidc.ptev"=PteVideo.dll "VIDC.MPG4"=mpg4c32.dll "VIDC.MP42"=mpg4c32.dll ======File associations====== .js - edit - .js - open - ======List of files/folders created in the last 1 month====== 2012-02-07 00:27:52 ----A---- C:\Ad-Report-CLEAN .txt 2012-02-07 00:27:35 ----D---- C:\Program Files\Ad-Remover 2012-02-07 00:02:59 ----A---- C:\AdwCleaner .txt 2012-02-06 23:34:35 ----A---- C:\AdwCleaner .txt 2012-02-06 23:14:12 ----D---- C:\Program Files\trend micro 2012-02-06 23:14:11 ----D---- C:\rsit 2012-02-04 19:23:50 ----A---- C:\WINDOWS\system32\vsregexp.dll 2012-02-04 19:23:47 ----A---- C:\WINDOWS\system32\zlcommdb.dll 2012-02-04 19:23:47 ----A---- C:\WINDOWS\system32\zlcomm.dll 2012-02-04 19:23:37 ----A---- C:\WINDOWS\system32\vswmi.dll 2012-02-04 19:23:35 ----A---- C:\WINDOWS\system32\zpeng25.dll 2012-02-04 19:23:35 ----A---- C:\WINDOWS\system32\vsxml.dll 2012-02-04 19:23:34 ----D---- C:\WINDOWS\system32\ZoneLabs 2012-02-04 19:23:34 ----A---- C:\WINDOWS\system32\vspubapi.dll 2012-02-04 19:23:34 ----A---- C:\WINDOWS\system32\vsmonapi.dll 2012-02-04 19:23:30 ----A---- C:\WINDOWS\system32\vsdatant.sys 2012-02-04 19:23:29 ----D---- C:\Program Files\Zone Labs 2012-02-04 19:22:37 ----A---- C:\WINDOWS\system32\vsdata.dll 2012-02-04 19:22:36 ----A---- C:\WINDOWS\system32\vsutil.dll 2012-02-04 19:22:36 ----A---- C:\WINDOWS\system32\vsinit.dll 2012-02-04 19:19:45 ----D---- C:\WINDOWS\Internet Logs 2012-02-04 18:54:53 ----D---- C:\Program Files\Protection_ZoneAlarm 2012-02-04 18:54:02 ----AH---- C:\WINDOWS\system32\zllictbl.dat 2012-02-04 18:53:51 ----A---- C:\WINDOWS\system32\vsutil_loc040c.dll 2012-02-04 13:49:06 ----D---- C:\Documents and Settings\All Users\Application Data\CheckPoint 2012-01-22 22:21:25 ----D---- C:\Documents and Settings\All Users\Application Data\Retrospect 2012-01-22 18:25:45 ----D---- C:\Documents and Settings\Shot\Application Data\Avira 2012-01-22 18:07:42 ----A---- C:\WINDOWS\system32\drivers\avkmgr.sys 2012-01-22 18:07:42 ----A---- C:\WINDOWS\system32\drivers\avipbb.sys 2012-01-22 18:07:42 ----A---- C:\WINDOWS\system32\drivers\avgntflt.sys 2012-01-22 18:07:17 ----D---- C:\Program Files\Avira 2012-01-22 18:07:17 ----D---- C:\Documents and Settings\All Users\Application Data\Avira 2012-01-19 09:13:26 ----HDC---- C:\WINDOWS\$NtUninstallKB2585542$ 2012-01-16 11:17:59 ----HDC---- C:\WINDOWS\$NtUninstallKB2646524$ 2012-01-16 11:17:42 ----HDC---- C:\WINDOWS\$NtUninstallKB2631813$ 2012-01-16 11:12:39 ----HDC---- C:\WINDOWS\$NtUninstallKB2598479$ 2012-01-16 11:12:23 ----HDC---- C:\WINDOWS\$NtUninstallKB2603381$ 2012-01-16 11:12:04 ----HDC---- C:\WINDOWS\$NtUninstallKB2584146$ ======List of files/folders modified in the last 1 month====== 2012-02-07 10:00:16 ----D---- C:\WINDOWS\Temp 2012-02-07 08:59:25 ----D---- C:\WINDOWS\Prefetch 2012-02-07 08:42:20 ----D---- C:\WINDOWS\system32\CatRoot2 2012-02-07 01:23:13 ----A---- C:\WINDOWS\SchedLgU.Txt 2012-02-07 01:17:51 ----D---- C:\WINDOWS\system32\drivers 2012-02-07 00:52:01 ----D---- C:\Program Files\Malwarebytes' Anti-Malware 2012-02-07 00:27:35 ----RHD---- C:\Program Files 2012-02-07 00:03:48 ----SD---- C:\WINDOWS\Tasks 2012-02-07 00:03:36 ----SHD---- C:\WINDOWS\Installer 2012-02-06 23:19:33 ----D---- C:\Documents and Settings\Shot\Application Data\Orbit 2012-02-06 14:39:30 ----SHD---- C:\System Volume Information 2012-02-06 14:37:46 ----D---- C:\WINDOWS\system32\NtmsData 2012-02-06 11:41:09 ----D---- C:\Program Files\CRESUS2 2012-02-06 11:41:09 ----A---- C:\WINDOWS\win.ini 2012-02-06 10:16:35 ----D---- C:\WINDOWS\Registration 2012-02-05 21:27:43 ----HD---- C:\WINDOWS 2012-02-05 11:40:50 ----D---- C:\downloads 2012-02-04 20:07:50 ----HD---- C:\Config.Msi 2012-02-04 19:24:00 ----AD---- C:\WINDOWS\system32 2012-02-04 18:54:04 ----D---- C:\Program Files\CheckPoint 2012-02-04 13:52:40 ----D---- C:\WINDOWS\WinSxS 2012-02-04 13:33:58 ----RASH---- C:\BOOT.INI 2012-02-04 13:33:58 ----A---- C:\WINDOWS\system.ini 2012-02-04 13:21:55 ----D---- C:\Program Files\Geneatique2012 2012-02-04 13:20:14 ----D---- C:\Documents and Settings\All Users\Application Data\RetroExp 2012-02-04 09:57:06 ----A---- C:\WINDOWS\NeroDigital.ini 2012-02-02 17:14:01 ----D---- C:\Program Files\Mozilla Firefox 2012-01-22 22:24:30 ----D---- C:\Program Files\Retrospect 2012-01-22 21:55:50 ----D---- C:\Documents and Settings\Shot\Application Data\HPAppData 2012-01-22 21:19:07 ----D---- C:\WINDOWS\REPAIR 2012-01-22 18:43:50 ----HD---- C:\WINDOWS\inf 2012-01-19 09:31:53 ----D---- C:\Documents and Settings\All Users\Application Data\Adobe 2012-01-19 09:31:40 ----D---- C:\Program Files\Fichiers communs\Adobe 2012-01-19 09:14:19 ----RSHD---- C:\WINDOWS\system32\dllcache 2012-01-19 01:07:43 ----HD---- C:\WINDOWS\$hf_mig$ 2012-01-16 11:18:04 ----A---- C:\WINDOWS\imsins.BAK 2012-01-16 11:12:58 ----A---- C:\WINDOWS\system32\MRT.exe 2012-01-16 10:40:47 ----D---- C:\Program Files\Adobe 2012-01-16 10:37:22 ----D---- C:\Documents and Settings\Shot\Application Data\Adobe ======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)====== R0 agp440;Filtre de bus AGP Intel; C:\WINDOWS\system32\DRIVERS\agp440.sys R0 agpCPQ;Filtre de bus AGP Compaq; C:\WINDOWS\system32\DRIVERS\agpCPQ.sys R0 alim1541;Filtre de bus AGP ALI; C:\WINDOWS\system32\DRIVERS\alim1541.sys R0 amdagp;Pilote de filtre du bus AMD AGP; C:\WINDOWS\system32\DRIVERS\amdagp.sys R0 cbidf;cbidf; C:\WINDOWS\system32\DRIVERS\cbidf2k.sys R0 PxHelp20;PxHelp20; C:\WINDOWS\System32\Drivers\PxHelp20.sys R0 sisagp;Filtre de bus AGP SIS; C:\WINDOWS\system32\DRIVERS\sisagp.sys R0 sptd;sptd; C:\WINDOWS\System32\Drivers\sptd.sys R0 viaagp;Filtre de bus AGP VIA; C:\WINDOWS\system32\DRIVERS\viaagp.sys R1 avkmgr;avkmgr; C:\WINDOWS\system32\DRIVERS\avkmgr.sys R1 intelppm;Pilote de processeur Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys R1 PQNTDrv;PQNTDrv; C:\WINDOWS\system32\drivers\PQNTDrv.sys R1 ssmdrv;ssmdrv; C:\WINDOWS\system32\DRIVERS\ssmdrv.sys R2 ASCTRM;ASCTRM; C:\WINDOWS\system32\drivers\ASCTRM.sys R2 avgntflt;avgntflt; C:\WINDOWS\system32\DRIVERS\avgntflt.sys R2 vsdatant;vsdatant; C:\WINDOWS\System32\vsdatant.sys R3 Afc;PPdus ASPI Shell; C:\WINDOWS\system32\drivers\Afc.sys R3 AgereSoftModem;Agere Systems Soft Modem; C:\WINDOWS\system32\DRIVERS\AGRSM.sys R3 HDAudBus;Pilote de bus Microsoft UAA pour High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys R3 HidUsb;Pilote de classe HID Microsoft; C:\WINDOWS\system32\DRIVERS\hidusb.sys R3 ialm;ialm; C:\WINDOWS\system32\DRIVERS\igxpmp32.sys R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys R3 LVPr2Mon;Logitech LVPr2Mon Driver; C:\WINDOWS\system32\DRIVERS\LVPr2Mon.sys R3 mouhid;Pilote HID de souris; C:\WINDOWS\system32\DRIVERS\mouhid.sys R3 RTL8023xp;Realtek 10/100/1000 NIC Family all in one NDIS XP Driver; C:\WINDOWS\system32\DRIVERS\Rtlnicxp.sys R3 SynTP;Synaptics TouchPad Driver; C:\WINDOWS\system32\DRIVERS\SynTP.sys R3 USBSTOR;Pilote de stockage de masse USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS R3 usbuhci;Pilote miniport de contrôleur hôte universel USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys R3 w29n51;Pilote de carte de connexion réseau Intel(R) PRO/Wireless 2200BG pour Windows XP; C:\WINDOWS\system32\DRIVERS\w29n51.sys R3 wanatw;WAN Miniport (ATW); C:\WINDOWS\system32\DRIVERS\wanatw4.sys R4 WS2IFSL;Environnement de prise en charge de Fournisseur de services non-IFS Windows Sockets 2.0; C:\WINDOWS\System32\drivers\ws2ifsl.sys S0 srescan;srescan; C:\WINDOWS\system32\ZoneLabs\srescan.sys S1 kbdhid;Pilote HID de clavier; C:\WINDOWS\system32\DRIVERS\kbdhid.sys S2 adfs;adfs; C:\WINDOWS\system32\drivers\adfs.sys S3 catchme;catchme; \??\C:\DOCUME~1\UTILIS~1\LOCALS~1\Temp\catchme.sys S3 HdAudAddService;Pilote de fonction Microsoft UAA pour Service High Definition Audio; C:\WINDOWS\system32\drivers\HdAudio.sys S3 HPZid412;IEEE-1284.4 Driver HPZid412; C:\WINDOWS\system32\DRIVERS\HPZid412.sys S3 HPZipr12;Print Class Driver for IEEE-1284.4 HPZipr12; C:\WINDOWS\system32\DRIVERS\HPZipr12.sys S3 HPZius12;USB to IEEE-1284.4 Translation Driver HPZius12; C:\WINDOWS\system32\DRIVERS\HPZius12.sys S3 LVcKap;Logitech AEC Driver; C:\WINDOWS\system32\DRIVERS\LVcKap.sys S3 LVMVDrv;Logitech Machine Vision Engine Loader; C:\WINDOWS\system32\DRIVERS\LVMVDrv.sys S3 LVUSBSta;Logitech USB Monitor Filter; C:\WINDOWS\system32\drivers\lvusbsta.sys S3 MSTEE;Convertisseur en T/site-à-site de répartition Microsoft; C:\WINDOWS\system32\drivers\MSTEE.sys S3 NABTSFEC;Codec NABTS/FEC VBI; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys S3 NdisIP;Connection TV/vidéo Microsoft; C:\WINDOWS\system32\DRIVERS\NdisIP.sys S3 ovt530;Webcam Classic; C:\WINDOWS\System32\Drivers\ov530vid.sys S3 PID_PEPI;Logitech QuickCam IM(PID_PEPI); C:\WINDOWS\system32\DRIVERS\LV302V32.SYS S3 SLIP;Détrameur décalage BDA; C:\WINDOWS\system32\DRIVERS\SLIP.sys S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys S3 usbaudio;Pilote USB audio (WDM); C:\WINDOWS\system32\drivers\usbaudio.sys S3 usbccgp;Pilote parent générique USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbccgp.sys S3 usbprint;Classe d'imprimantes USB Microsoft; C:\WINDOWS\system32\DRIVERS\usbprint.sys S3 usbscan;Pilote de scanneur USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys S3 WSTCODEC;Codec Teletext standard; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys S3 X-Rite;X-Rite USB Service; C:\WINDOWS\system32\DRIVERS\XrUsb.sys S4 mchInjDrv;mchInjDrv; \??\C:\DOCUME~1\Shot\LOCALS~1\Temp\mc21.tmp R2 AntiVirService;Avira Protection temps réel; C:\Program Files\Avira\AntiVir Desktop\avguard.exe R2 AntiVirWebService;Avira Protection Web; C:\Program Files\Avira\AntiVir Desktop\AVWEBGRD.EXE R2 AOL ACS;AOL Connectivity Service; C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe R2 CLCapSvc;CyberLink Background Capture Service (CBCS); c:\APPS\Powercinema\Kernel\TV\CLCapSvc.exe R2 CLSched;CyberLink Task Scheduler (CTS); c:\APPS\Powercinema\Kernel\TV\CLSched.exe R2 CyberLink Media Library Service;CyberLink Media Library Service; C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLServer.exe R2 EpsonBidirectionalService;EpsonBidirectionalService; C:\Program Files\Fichiers communs\EPSON\EBAPI\eEBSVC.exe R2 EPSONStatusAgent2;EPSON Printer Status Agent2; C:\Program Files\Fichiers communs\EPSON\EBAPI\SAgent2.exe R2 GenericHidService;Generic Service for HID Keyboard Input Collections; c:\APPS\HIDSERVICE\HIDSERVICE.exe R2 hpqddsvc;Service HP CUE DeviceDiscovery; C:\WINDOWS\system32\svchost.exe R2 HPSLPSVC;HP Network Devices Support; C:\WINDOWS\system32\svchost.exe R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe R2 LVPrcSrv;Process Monitor; c:\program files\fichiers communs\logitech\lvmvfm\LVPrcSrv.exe R2 Net Driver HPZ12;Net Driver HPZ12; C:\WINDOWS\System32\svchost.exe R2 PixVue;PixVue; C:\Program Files\PixVue.Com\PixVue\bin\Daemon.exe R2 Pml Driver HPZ12;Pml Driver HPZ12; C:\WINDOWS\System32\svchost.exe R2 RetroExpLauncher;Retrospect Express HD Launcher; C:\Program Files\Retrospect\Retrospect Express HD 2.5\retrorun.exe R2 vsmon;TrueVector Internet Monitor; C:\WINDOWS\system32\ZoneLabs\vsmon.exe R3 hpqcxs08;hpqcxs08; C:\WINDOWS\system32\svchost.exe S2 LVSrvLauncher;LVSrvLauncher; C:\Program Files\Fichiers communs\Logitech\SrvLnch\SrvLnch.exe S2 Planificateur LiveUpdate automatique;Planificateur LiveUpdate automatique; C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe S3 gusvc;Google Updater Service; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Fichiers communs\InstallShield\Driver\1150\Intel 32\IDriverT.exe S3 idsvc;Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe S3 MySqlInventime;MySqlInventime; c:\mysql\bin\mysqld-max-nt MySqlInventime S3 ose;Office Source Engine; C:\Program Files\Fichiers communs\Microsoft Shared\Source Engine\OSE.EXE S3 SwitchBoard;SwitchBoard; C:\Program Files\Fichiers communs\Adobe\SwitchBoard\SwitchBoard.exe S3 UPnPService;UPnPService; C:\Program Files\Fichiers communs\MAGIX Shared\UPnPService\UPnPService.exe S3 WMPNetworkSvc;Service Partage réseau du Lecteur Windows Media; C:\Program Files\Windows Media Player\WMPNetwk.exe S3 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe -----------------EOF-----------------

kmisol · Answer 15 · Posté le 07/02/2012 à 19:50:48

Hello, {F2E259E8-0FC8-438C-A6E0-342DD80FA53E} - Copernic Agent - C:\PROGRA~1\COPERN~1\COPERN~1.DLL {B28B4479-D9C2-41D1-B74D-74A1827037CD} - &PixVue - C:\Program Files\PixVue.Com\PixVue\bin\PixVue.dll {EF99BD32-C1FB-11D2-892F-0090271D4F88} - Yahoo! Toolbar avec bloqueur de fenêtres pop-up - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll {300BC64A-BF32-4cc8-8917-91148CEFE700} - PrivBar - c:\progra~1\DropMyRights\PrivBar.dll {C55BBCD6-41AD-48AD-9953-3609C48EACC7} - Grab Pro - C:\Program Files\Orbitdownloader\GrabPro.dll {d7f26d0e-9801-45c3-a091-8a65e4ed73b5} - Protection ZoneAlarm Toolbar - C:\Program Files\Protection_ZoneAlarm\prxtbProt.dll Est-ce vraiment utile toutes ces toolbars !? Ces barres d'outils sont souvent la cause de ralentissement(s) ... --> Les toolbars, c'est pas obligatoire ! <-- ----- Télécharge SX Check&Update sur le bureau. Déconnecte-toi, désactive ton anti-virus et ferme toutes applications en cours ! Double-clique sur SXC&U.exe situé sur ton Bureau pour lancer l'outil. Au menu pricipal, choisis l'option Rapport . Un rapport va s'afficher. Ce rapport va, peut-être, t'indiquer que les programmes ne sont pas à jour. Il suffit, alors, de cliquer sur le bouton correspondant pour lancer la(les) mise(s) à jour. http://forum.security-x.fr/tutoriels-317/%28tutoriel%29-sx-checkupdate/ Pense à réactiver ton antivirus. ----- Télécharge, installe et mets à jour Malwarebytes Anti-malware . Puis, exécute un scan complet . Une fois le scan achevé, si MalwareByte's a détecté des infections, clique sur Afficher les résultats , puis sur Supprimer la sélection . Poste le rapport.

Info45 · Answer 16 · Posté le 07/02/2012 à 23:54:21

je viens de lire ton mail à l'instant 23h50 je fais la manip demain matin Quant aux toolbar je dois réinstaller le toobar Avira pour pouvoir activer la protection Web. Parmi ceux que tu cites seul le plug-in PixVue me sert (il permet de lire les métadonnées des fichiers jpeg)

kmisol · Answer 17 · Posté le 08/02/2012 à 00:02:10

... Alors, ... via Démarrer > Panneau de config. > Ajout/suppres... de programmes, supprime : Copernic Agent , Grab Pro , PrivBar , Protection ZoneAlarm Toolbar Yahoo! Toolbar avec bloqueur de fenêtres pop-up .

Info45 · Answer 18 · Posté le 09/02/2012 à 09:53:28

Bonjour, J'ai désinstaller les toolbars superflues en revanche je n'arrive pas à désinstaller "Protection ZoneAlarm Toolbar" lorsque je clique désinstaller rien ne se passe j'ai essayé avec ZoneAlarm activé puis désactivé rien à faire. J'ai mis à jour Flash & Java Ci-après mon rapport MalwareBytes --------------------------------------------------------------------------- Malwarebytes Anti-Malware 1.60.1.1000 www.malwarebytes.org Version de la base de données: v2012.02.08.01 Windows XP Service Pack 3 x86 NTFS Internet Explorer 8.0.6001.18702 Shot :: SN012345678912 08/02/2012 09:38:38 mbam-log-2012-02-08 (09-38-38).txt Type d'examen: Examen complet Options d'examen activées: Mémoire | Démarrage | Registre | Système de fichiers | Heuristique/Extra | Heuristique/Shuriken | PUP | PUM Options d'examen désactivées: P2P Elément(s) analysé(s): 437567 Temps écoulé: 5 heure(s), 24 minute(s), 36 seconde(s) Processus mémoire détecté(s): 0 (Aucun élément nuisible détecté) Module(s) mémoire détecté(s): 0 (Aucun élément nuisible détecté) Clé(s) du Registre détectée(s): 0 (Aucun élément nuisible détecté) Valeur(s) du Registre détectée(s): 0 (Aucun élément nuisible détecté) Elément(s) de données du Registre détecté(s): 0 (Aucun élément nuisible détecté) Dossier(s) détecté(s): 0 (Aucun élément nuisible détecté) Fichier(s) détecté(s): 1 E:\Travail\Informatique\Logiciels\Bureautique\Office2007\Eolia\VEBKGBWSQIFI2007\VEBKGBWSQIFI2007\VEBKGBWSQIFI2007.exe (Hacktool.Agent) -> Mis en quarantaine et supprimé avec succès. (fin)